PlgDestroy
PlgGetAbout
PlgGetDirectLink
PlgGetOptions
PlgInit
PlgOnError
Behavioral task
behavioral1
Sample
1fb20a3db492679ff9f2d526886ec11b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1fb20a3db492679ff9f2d526886ec11b.dll
Resource
win10v2004-20231222-en
Target
1fb20a3db492679ff9f2d526886ec11b
Size
60KB
MD5
1fb20a3db492679ff9f2d526886ec11b
SHA1
5281d012eb75e691cd8183705d2ea93e26bad1f9
SHA256
e3c25885181f4e8556012e754a20a63d1ae0f81178ec4f820efbe2b7aa970e40
SHA512
7e35e07d4ee216c534a07201e2067c24f7aef857dd9fc20eaf4b8fac0e4e4bf9f39feeb411f7197dd751a37cfcc6f4f06be59a0cd350356523d11e0e89ac20ea
SSDEEP
1536:yVZoZz0kCy1N8ctMO+HnRGkAhADlfxDlIoPJJF:yVZ4zTCvcC55l5lI0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1fb20a3db492679ff9f2d526886ec11b |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PlgDestroy
PlgGetAbout
PlgGetDirectLink
PlgGetOptions
PlgInit
PlgOnError
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ