CancelDll
LoadDll
Behavioral task
behavioral1
Sample
13a45441bf9990914d219583d8919ae9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13a45441bf9990914d219583d8919ae9.dll
Resource
win10v2004-20231215-en
Target
13a45441bf9990914d219583d8919ae9
Size
63KB
MD5
13a45441bf9990914d219583d8919ae9
SHA1
042b2d06e082abac0f842e2056b5b822991caf5f
SHA256
bdcd78ead8d286f38f7d1d74f8f18bae38bcf9a8ff93e69f22259330d9f4481f
SHA512
eb41cde37756984cbc45474704b5fa857c5bec2053c4e13cfc26f389072e62878c403669959447958a004e3d76489d3f09d14fb65b9ea56ec0924f6c44b26cce
SSDEEP
1536:grl1KpEMw+D+Otd7zgBQFi8oq31HPGZ0BjiXi:grlpAht5zLoq31HucF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
13a45441bf9990914d219583d8919ae9 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ