End
Start
Behavioral task
behavioral1
Sample
55c80549d4561ac7aa2deae1f9dbf1e8.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55c80549d4561ac7aa2deae1f9dbf1e8.dll
Resource
win10v2004-20231215-en
Target
55c80549d4561ac7aa2deae1f9dbf1e8
Size
13KB
MD5
55c80549d4561ac7aa2deae1f9dbf1e8
SHA1
16438ed07b04c4ce3bed7299b09e3634fbd8cc90
SHA256
8bf99437a7d8eb82367ff030f5b32938a83b48a46b7db9c10313112fa54317cd
SHA512
172b2e62c43c1193053076eb06465e57fb1ee0045f7ead1ca9841f1c16c2117212f8f3ab5974ac65069f743060f484e840300d8e687b48e908461e2679016755
SSDEEP
192:m1x562xstdOwuVxEWnvaRmP+ox49qNTFq8aJfsSU3szQHjCD/eolHxBh:m127cx9AmPPu9AJAySUcsDCD/Px
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
55c80549d4561ac7aa2deae1f9dbf1e8 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
End
Start
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ