GetResults
GetStatus
StartScan
StopScan
Version
Behavioral task
behavioral1
Sample
95bd045d1a2262edf2b31fbbe4542ed4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
95bd045d1a2262edf2b31fbbe4542ed4.dll
Resource
win10v2004-20231215-en
Target
95bd045d1a2262edf2b31fbbe4542ed4
Size
60KB
MD5
95bd045d1a2262edf2b31fbbe4542ed4
SHA1
7be8d6c4b8aaa83c0646d61a7c96f87e96247770
SHA256
fc017e2251fe6f8317d4e3397b5298e0ac8b0169ace812e374929460ed3a375a
SHA512
c0f2dee3bf91b58a9e9a01d39998148e24203cdbe8a9fc922c7b6e5561cbbc38d4d5f89b6c47139cf66a5607e5e629ef018cf2701e8192b1723a4d77c37b87c7
SSDEEP
768:rhxl+jn9bv+NsK2Tpasw7v3KDtR6dXuGUNSOWBDlo/WiiFbIK85hNDzES90dh6St:dx8la1wGHRoOiiFbkhNzEM0rgv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
95bd045d1a2262edf2b31fbbe4542ed4 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetResults
GetStatus
StartScan
StopScan
Version
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ