CancelDll
LoadDll
Behavioral task
behavioral1
Sample
55ca8d90c98a89210a7547838c9e3bcf.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55ca8d90c98a89210a7547838c9e3bcf.dll
Resource
win10v2004-20231222-en
Target
55ca8d90c98a89210a7547838c9e3bcf
Size
49KB
MD5
55ca8d90c98a89210a7547838c9e3bcf
SHA1
5be1edb0f7cd829501dcb6222f22e81a58ad7a5b
SHA256
fe0286b127649bd5daf56312ee2223c8ca9982b50ce1817d1b5cbf2a45d860c6
SHA512
8ec5efd10e727e8acdab449e6fd115c3dc4a468e74a68fed57b84ca9310c4ef17251e7dc2c1e0e9091667eb3eede3d267155a1fa2dca6422ff682c1fea50d273
SSDEEP
768:DbGhRtyul4RDH7TlZyiL/ijZzieVGPjUl9LHuPtQf4o9aHwjHjtHJVt:DWkbZZHLqlVf4ogQjDnVt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
55ca8d90c98a89210a7547838c9e3bcf |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ