odb_install
odb_run
odb_set
Behavioral task
behavioral1
Sample
2979f7f46020a9286fe5110cd1c1a17e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2979f7f46020a9286fe5110cd1c1a17e.dll
Resource
win10v2004-20231215-en
Target
2979f7f46020a9286fe5110cd1c1a17e
Size
9KB
MD5
2979f7f46020a9286fe5110cd1c1a17e
SHA1
1ef25f870ec05c7c2095b2f2f8b6dbcb80138a86
SHA256
6b3213fa971a20810b03f02b1d64219802169e84463062c9f20bb8b756e4eff2
SHA512
bc2a7de1e7dcc295fc340e7a320840aec3cae165d7311f369b24c493f15978ea465907ffceee449f3be43d6d56daafc935dce38eae3a71b10682db6120b3a854
SSDEEP
192:rDOgKXdbztGac18nPGOKYSLsFWJkzuytDo6oNjDMIsK:nyXdbz0ac1+PG7Y0sAJkzufNvH5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2979f7f46020a9286fe5110cd1c1a17e |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
odb_install
odb_run
odb_set
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ