SetDIPSHook
startNow
Behavioral task
behavioral1
Sample
51ac1508ae3e9df992ae1d37d5053a3a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51ac1508ae3e9df992ae1d37d5053a3a.dll
Resource
win10v2004-20231215-en
Target
51ac1508ae3e9df992ae1d37d5053a3a
Size
19KB
MD5
51ac1508ae3e9df992ae1d37d5053a3a
SHA1
250e79226a0983e17fd4bb6bb7bfbae9f10470ca
SHA256
295ce2e0fe77a96aefc44da6325b9ee829775cc126b00c1306c678c37a5975d2
SHA512
ad6193dd9a3192f683041e097e981cee9766650f5299711f8f0a385dacd49583503b009a7a8d396a15d96096e225298071786c193d1870fb9d3832f44c87c1b0
SSDEEP
384:PrTEufUIuuy4/wtolwv0cTeehci21EUZrGt47Ma:zTFUIEgwtoDehcb1vZGpa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
51ac1508ae3e9df992ae1d37d5053a3a |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetDIPSHook
startNow
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ