lspCleanup
lspGetInfo
lspInitialize
lspParseMsg
Behavioral task
behavioral1
Sample
15739fcd265f35427fc93daf0be8e3b5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15739fcd265f35427fc93daf0be8e3b5.dll
Resource
win10v2004-20231215-en
Target
15739fcd265f35427fc93daf0be8e3b5
Size
7KB
MD5
15739fcd265f35427fc93daf0be8e3b5
SHA1
129212c891eccca125e244755b8b11913ec54a69
SHA256
77f64f0416c998548be55f98a28b3b73b63d509dbeec50b777153082ec4e575c
SHA512
fc5d2547dba823d2d3b8e4d37d6b9327e7b315fa673175ed729977782f5c6cc8df06dcfabda28f08d95a5758c969081ff2b72c4022faa4e332d811500f946513
SSDEEP
96:oVIVNZvD2ZwKFo9VZU+fZZSRDYjrYWWvBo44o4xTDQeu1DkLkV64osR1:okZowK+lU+fZ0SPoo44rdQeu1oLkVN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15739fcd265f35427fc93daf0be8e3b5 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lspCleanup
lspGetInfo
lspInitialize
lspParseMsg
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ