CancelDll
LoadDll
Behavioral task
behavioral1
Sample
793f3dcc248fd2005e3b99f6eb2d5cca.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
793f3dcc248fd2005e3b99f6eb2d5cca.dll
Resource
win10v2004-20231222-en
Target
793f3dcc248fd2005e3b99f6eb2d5cca
Size
66KB
MD5
793f3dcc248fd2005e3b99f6eb2d5cca
SHA1
14685b17e0de55e661717caba3b1570d7b5567a3
SHA256
db82494a99c2f343494b8ec915dc6fbdccb5ab0fee1c393362cf7b08c00c494e
SHA512
638e4517c230f0c394c0254057942b21d37d02f265514a9aed7dd4a3b0f628ce369b513c626030e06255231738f9db9bab5d1fcdd6289d94009242fde4855f0b
SSDEEP
1536:wAceoINVALs6X7RwiLe+zPYsMrly/2/npfoYcRfy0:wAcTqGs6XG4e+tMk/25ohD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
793f3dcc248fd2005e3b99f6eb2d5cca |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ