CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5516d93b8a7bfa94823ba02f50a9bf99.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5516d93b8a7bfa94823ba02f50a9bf99.dll
Resource
win10v2004-20231215-en
Target
5516d93b8a7bfa94823ba02f50a9bf99
Size
56KB
MD5
5516d93b8a7bfa94823ba02f50a9bf99
SHA1
14f4cb6e57d20a664c471aa3b21ce8c8bb18b4ec
SHA256
9e524db803563f7b8771f18ab01d3107ae941b39ab48e3d9f3575ebdbb2dc74c
SHA512
8b97c2661e2abfc7ad4d2e49c1be1d6eda920d41bffa4446b26b4221d8ba2e226f84e9e2fea7bf5d4292e4c87dcc1d74f4b1e951c2ecf5abfa5eefc869bb26a9
SSDEEP
768:IykIwePd8g7dH9r8AeGkEASaNDnhSG8wBy9OIqjQtgzYa/K5a7LLUqgxCRNsAxTK:Iykzkagf88mnfB+0QqYavfLU1CTl0B
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5516d93b8a7bfa94823ba02f50a9bf99 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ