jjj
kkk
xxx
Behavioral task
behavioral1
Sample
494eb2a9b3da401d053535e11d001eda.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
494eb2a9b3da401d053535e11d001eda.dll
Resource
win10v2004-20231215-en
Target
494eb2a9b3da401d053535e11d001eda
Size
10KB
MD5
494eb2a9b3da401d053535e11d001eda
SHA1
1fac2a74d3bc23fee6e0fef36295b2aef6f516e4
SHA256
e5da49a4cb131730b33760b00cab30f2de33b6dfd55201bf76c827ceba69052e
SHA512
15f0e4d171b3813c91539dbf717c8a447b4f87d98a630d27b50ad891260e585b15d80e57659fc1ab3892a4ce498787cfb29054b99e328d3d78e697a1ef85f426
SSDEEP
192:R87mltOQ1kxUMdH9K/NHD2l4t55uWLPQ+9K2caxS7LO:y7Pzs8l4t5UEN9Xc8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
494eb2a9b3da401d053535e11d001eda |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ