windowshk1
windowshk2
Behavioral task
behavioral1
Sample
19126fa0e2c1e8f85625d217718dee79.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19126fa0e2c1e8f85625d217718dee79.dll
Resource
win10v2004-20231215-en
Target
19126fa0e2c1e8f85625d217718dee79
Size
19KB
MD5
19126fa0e2c1e8f85625d217718dee79
SHA1
650b0850e7d62736511fd39014ed104186ca8948
SHA256
74e0a343d06dfa37452cae10544f56cfb28b0f4eb31383436139dde3848a4641
SHA512
14694f06bcb64bdca519d3adabb88f623f9a914974631f12ce65001e6cd72b7d4fc2977057af40d54e9030ac5fda164212264a2b5045df664e4eb2fccb4a76fa
SSDEEP
384:qCLXBndl/a5IISyA1PUcIlDj+O92DArn9WHWbKAIaMjl9vsXLptb6/jI:qCLXBdlir41W+42Dk9gWbk1jz01N6/8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
19126fa0e2c1e8f85625d217718dee79 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
windowshk1
windowshk2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ