StartHook2
StopHook2
Behavioral task
behavioral1
Sample
537a46a6fadda017e42391573d90cb53.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
537a46a6fadda017e42391573d90cb53.dll
Resource
win10v2004-20231215-en
Target
537a46a6fadda017e42391573d90cb53
Size
19KB
MD5
537a46a6fadda017e42391573d90cb53
SHA1
d4e1fef1d415ebb2dba8e1bec73a540e27eb5006
SHA256
3b2029a7e9652c69dc3e14841f2dce1a5a70c04ce2720a3ad5d527505470ba5d
SHA512
3a9a13d9851e75fd63fd0b20c8ab424fa5b3650518ee90c64256d54c250ae32a71280e3fdaa07c29852a3e3b595d32800bed83cdee5b5c87876c8983f7bd9524
SSDEEP
384:WVPumoOdwxTgx9W6562kaRX/iGGUbey1dslEZOHE:WV3oOdwxTiwULRsUiOJZm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
537a46a6fadda017e42391573d90cb53 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook2
StopHook2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ