fj_Hook1
fj_Hook2
Behavioral task
behavioral1
Sample
2d5c3defa46cd94bcc333a857015f9e5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2d5c3defa46cd94bcc333a857015f9e5.dll
Resource
win10v2004-20231215-en
Target
2d5c3defa46cd94bcc333a857015f9e5
Size
13KB
MD5
2d5c3defa46cd94bcc333a857015f9e5
SHA1
7445addb72bf7607393156c01bd7b56af778638c
SHA256
8b5d0e03533984b4cd120651e92082584f39cc2bcaa2144d438704abbc87479d
SHA512
f77baf22093361a0aa45d499fc76339bc265b0af6ed8de4ecdab89dc2e4d794507e9d1dcfdef82d089b3254fb8cf1b9ba2de2756b799a91f5280333c941785d8
SSDEEP
192:nrKQPM8IHDPtX91+OeLb8EAyzAqzg/JgyQDuOLyja+Lyj7Z1ouD9ivVyA2kZ4db:mV8wPXtYbhs5nja+enno00yRkZqb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d5c3defa46cd94bcc333a857015f9e5 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
fj_Hook1
fj_Hook2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ