CancelDll
LoadDll
Behavioral task
behavioral1
Sample
978ae1accf49ba6db4e6a4d707179ff4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
978ae1accf49ba6db4e6a4d707179ff4.dll
Resource
win10v2004-20231215-en
Target
978ae1accf49ba6db4e6a4d707179ff4
Size
80KB
MD5
978ae1accf49ba6db4e6a4d707179ff4
SHA1
f713b0e8f1534c85ccd2340fb2dfaec2dae77782
SHA256
6334de792894efddf21624df1d792881fcfad224fec62570314a03c41e20448d
SHA512
eb5b561f0117a0b6c3184a8a6aff4c4d023cbd742c50b20362e32ff77ffd38046f214f7019edc63e1d4c6f3755ffc8c5c1034287bdad4f1c8e9c078d94cef25a
SSDEEP
1536:CjAO15+qtI2seFgtlkpd6rjdTGYqxZhOhOvY5G99NRhW2mWdSvJM4d353jcuDbbk:CjAO+qqigtipd6rVSYOvYyzhvhSvJMgA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
978ae1accf49ba6db4e6a4d707179ff4 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ