DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EasyFunc
EasyFunc2
LetItDo
Behavioral task
behavioral1
Sample
01fb61af18e58a71cfe80b1bbf0e6a93.dll
Resource
win7-20231215-en
Target
01fb61af18e58a71cfe80b1bbf0e6a93
Size
33KB
MD5
01fb61af18e58a71cfe80b1bbf0e6a93
SHA1
0e683bab838ebadccf4f3af3e24181aa013f3f16
SHA256
9d70506386b7cfe4124320dcc4c42a31f092d5f965b4f107b8c5605b2974680b
SHA512
9eef26540c15494ea32ee8690974da95df07db6ebe5a874bec676a78efa8e21d077ab45fbbb2a472f4ffa9878c3baf33f16f908843cee4e7f75db7dabb269c10
SSDEEP
768:YynpAhX7GstSgtsirHmPIspDh5GF3BmVETxJyov:YynpAhr/tftsi7II2m3BmVEtJyov
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
01fb61af18e58a71cfe80b1bbf0e6a93 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EasyFunc
EasyFunc2
LetItDo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ