StartHook2
StopHook2
Behavioral task
behavioral1
Sample
7a4ebf5b4425f1263519b023b4ce26d4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a4ebf5b4425f1263519b023b4ce26d4.dll
Resource
win10v2004-20231222-en
Target
7a4ebf5b4425f1263519b023b4ce26d4
Size
18KB
MD5
7a4ebf5b4425f1263519b023b4ce26d4
SHA1
7e32c9f09d18b6dced1e9714a69452f6402e0a2a
SHA256
417a494de180c7d0364ce704f5521f56c173374f718a1bcc5e10e03b2cc06018
SHA512
6a258c21e97bbbbd11f6e5f7a3a33ae43cf207ee553f9e5cc4c2ed4f17aa0de61f40598d87ea3581ef62a564efe503488534237daf9b643cf3da0ebc496d7e88
SSDEEP
384:g0AVp1UBYGtHnxoYJIlrx7yg4D1TIDjX1:g0c4BYGtHnxoYilrx2BD1TY1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7a4ebf5b4425f1263519b023b4ce26d4 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
StartHook2
StopHook2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ