sksHook
stzHook
Behavioral task
behavioral1
Sample
06b97818ba3dc1b92ba3e3670ac93ee8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06b97818ba3dc1b92ba3e3670ac93ee8.dll
Resource
win10v2004-20231215-en
Target
06b97818ba3dc1b92ba3e3670ac93ee8
Size
15KB
MD5
06b97818ba3dc1b92ba3e3670ac93ee8
SHA1
ebf9cd6ee56678f55130d24e168af80c96378559
SHA256
1378ad783f747ae67854e91b77798742b6de104612a2c1660f4b9b8900e151ad
SHA512
12a377120fb0b8d70e27112be467355cd07ab73868ac5a9f819e92854264c52578bf83027ad96331bea8f16c649e843178a1e477b0356f00163a36ea5622a7cd
SSDEEP
384:fO6ehgIOiZ9IkK0+Y4NAtGzCeM8rC5TWO:fONgVB014hzxC5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
06b97818ba3dc1b92ba3e3670ac93ee8 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
sksHook
stzHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ