InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
2af4d76a1b8fc5f275f381d4c986f7ba.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2af4d76a1b8fc5f275f381d4c986f7ba.dll
Resource
win10v2004-20231215-en
Target
2af4d76a1b8fc5f275f381d4c986f7ba
Size
67KB
MD5
2af4d76a1b8fc5f275f381d4c986f7ba
SHA1
2b39c6b028c38ef1a5b7275e74b5767985b44a94
SHA256
4485bad5f0d5430125d385f976d3d5dd6f4569690ae89bceda4ee92dae070b15
SHA512
b6e9dfd6b1bdcd513dfae06855307a6d36094270fdecf3d64e291f78e1e3ef7d6ccc04905f49209a9926f8da5df91c7c326cc8558630379bb7893f8c42aa0a47
SSDEEP
1536:WvxhkwhlSYCYyBquv5gq3a6R3xqV+j0lQyBS:gPS0RuWMaA1QbA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2af4d76a1b8fc5f275f381d4c986f7ba |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ