fj_Hook1
fj_Hook2
Behavioral task
behavioral1
Sample
4f003fe1577d58f375769596dbfda860.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f003fe1577d58f375769596dbfda860.dll
Resource
win10v2004-20231215-en
Target
4f003fe1577d58f375769596dbfda860
Size
13KB
MD5
4f003fe1577d58f375769596dbfda860
SHA1
e89a2a5d28c3800d91a7c34a2cf0e6d1a36f4704
SHA256
995fa8748a8fa5950da58679fa2aed58d938ad3e88ac025d75f6d565767abd67
SHA512
7f6bff52788733cd7728bdb439e05e3f5e46a86e280737074574cbe714fdcbf5da7cd7fc6d538e54407d211ba44c3c474beb209afb62668adc7eaba78de439fd
SSDEEP
192:nrBQPz67cib/SkSp677uCS+w2vDSqLn0MYfOMmYhSawGTQYyZ:Ny67Bq1Y20BDpL0pVwGTQNZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4f003fe1577d58f375769596dbfda860 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
fj_Hook1
fj_Hook2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ