mksHook
mtzHook
Behavioral task
behavioral1
Sample
73d8454b7f69a40f5883aa349dd202a0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
73d8454b7f69a40f5883aa349dd202a0.dll
Resource
win10v2004-20231215-en
Target
73d8454b7f69a40f5883aa349dd202a0
Size
19KB
MD5
73d8454b7f69a40f5883aa349dd202a0
SHA1
10b145563516d0c5b16c034c890f844497b7c7fc
SHA256
260317ee22421ff080ff3c692e3b1d24b4a33390546bb1d04f27cfd9a8987dda
SHA512
1f19c2ec281b05bf4ac5baeabf01dee6fa034dc6ba747065002efcd1dff351d29d572e185b9273d6b13f5c833a49c80ddcce0147d7e3d47b466d94e31829d9c5
SSDEEP
384:bNp6w+3YQ5M06m4+hHw/pYV8ihT5D/7UvsOGKb9mkLAZt:bNp6PBi0R4gHspYVLN49Y7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
73d8454b7f69a40f5883aa349dd202a0 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
mksHook
mtzHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ