MayaDllMain
ProtectionExe
Behavioral task
behavioral1
Sample
26c88e2cae395edcdc4e74fc8331b832.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
26c88e2cae395edcdc4e74fc8331b832.dll
Resource
win10v2004-20231222-en
Target
26c88e2cae395edcdc4e74fc8331b832
Size
16KB
MD5
26c88e2cae395edcdc4e74fc8331b832
SHA1
80c15a356ce6e7995223e378d0022a5dae73d86d
SHA256
705482ec167c59d9a52b3384563dbda44a9c5cde8bde5db9140c45bcc50bc4ef
SHA512
a8e2b6c574127166de63f4415371b9ac13c9768ba4c0fc62eae6fca5752c54e12a5be5964a838ccf96509b94041986ee8e3d9b44ef955e3fed09f4f262e9997d
SSDEEP
384:YJrhje6uYNQxIAZgRnjLzpefQIYroXQFh+k5aFsD:YBLFQLuJ/YfQJrsQFh+k5W4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
26c88e2cae395edcdc4e74fc8331b832 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
MayaDllMain
ProtectionExe
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ