IH
SR
UIH
Behavioral task
behavioral1
Sample
miN.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
miN.dll
Resource
win10v2004-20231222-en
Target
8f94f2200f201dd8ba5315d7aaef7553
Size
17KB
MD5
8f94f2200f201dd8ba5315d7aaef7553
SHA1
996bac9cd7619bb3c0904c5a4b7fc4da148fba0d
SHA256
b7aa1e52fca3f6867f504fd307ef341331c0a35c60545820420632d210efd5eb
SHA512
cc8e084729fe943e50cc25ea27dd0992d7eb22cb1a2bbbdc9f856e2103450e6aeca6680aa118e03a2115b256bb4d3455081545833a9d4aeeca758e3e6438ff9d
SSDEEP
384:D4mz0H3kVbd1znzBVDLLO/7HsJE2rTlj7LXGtVCVmh5hxPiq:DUHMTzzBVDnO/zuE2NnLXGtIVmtxPiq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/miN.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/miN.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/miN.dll |
unpack002/out.upx |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IH
SR
UIH
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ