InstGetMsg
MyCallWndProc
Behavioral task
behavioral1
Sample
796ce237c1de7c754b6e453a1489c4a2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
796ce237c1de7c754b6e453a1489c4a2.dll
Resource
win10v2004-20231215-en
Target
796ce237c1de7c754b6e453a1489c4a2
Size
22KB
MD5
796ce237c1de7c754b6e453a1489c4a2
SHA1
0a55a46b86d6f36cdcfc9b2f8d223e8adcf0c0c0
SHA256
ce53001474d832950f8e83c47f73d96531593f6cde446805aed9ba71e08a0ffc
SHA512
ece64f8baab2e6e0978cfc5ac3da9cb64d4179a2ba15d128a1621b12cfd2bfd75624454cc9a15ce5ac4760e90968b4b7ba833b0fd3d79d104903786255101715
SSDEEP
384:9ndY1OD08rdySNC3nOXKgcLYd/ARkWAPCWKtKDEW5AWUnU+O2p:9nWY4MRcLctJKU+Ow
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
796ce237c1de7c754b6e453a1489c4a2 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstGetMsg
MyCallWndProc
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ