Outt
Sett
Behavioral task
behavioral1
Sample
55b9a6d3096abbb7d067c6d8778bb0e9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55b9a6d3096abbb7d067c6d8778bb0e9.dll
Resource
win10v2004-20231222-en
Target
55b9a6d3096abbb7d067c6d8778bb0e9
Size
71KB
MD5
55b9a6d3096abbb7d067c6d8778bb0e9
SHA1
4a185f50b85f266a61119c77965e44ff9dfa7048
SHA256
732b32d96e0cdd9294c10551671ecbefbac9dc865737a6ba699fb7c87ee32ba9
SHA512
b77bdf5934b31f923a8dd6a887058728a8499e8abfdab3f4a7a85522f07d244244e041eed193b4c86ea4aba18d02d654eb3ef67a9f2b5bf227502b3323cc7a24
SSDEEP
1536:agF0eiyUcbxn08hV/0D3Bk/LzkR7zh2rWI030ka8zHH14KOV:t2yFt08hVcD3BkDzkR7tY03hJZ4BV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
55b9a6d3096abbb7d067c6d8778bb0e9 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ