RunPerl
luaL_loadfile
luaL_openlibs
lua_close
lua_getfield
lua_pcall
lua_pushstring
lua_tointeger
lua_tolstring
Behavioral task
behavioral1
Sample
43d85d7ac639fdb67b756c977c46e03e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
43d85d7ac639fdb67b756c977c46e03e.dll
Resource
win10v2004-20231222-en
Target
43d85d7ac639fdb67b756c977c46e03e
Size
225KB
MD5
43d85d7ac639fdb67b756c977c46e03e
SHA1
dd304803bf067ea3cd9a0a44255fc73c3639d9c1
SHA256
3b5ce6a6dfa672d7d1f4c4b9fe0f6571cecea58401beeb704513a0d97763cb54
SHA512
41cb43ec4bd1111149ce998e2c7caa5ecd9ca0e3ed83483fc3be9fa37a2e1119c7ac6b94a8072b2471f56e1ed161655827767336b9a7cbb2f6dd450e28abccbb
SSDEEP
6144:EoKI457oMLCUfZwOvVh6lz2IvMql5i1IWaS67ANLr5cc:E57owCUfaKh4z1N5iCWaS67Ax5cc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
43d85d7ac639fdb67b756c977c46e03e |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunPerl
luaL_loadfile
luaL_openlibs
lua_close
lua_getfield
lua_pcall
lua_pushstring
lua_tointeger
lua_tolstring
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ