SetDIPSHook
startNow
Behavioral task
behavioral1
Sample
a2295cc05ce07d754cb11e4d5e1e628c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2295cc05ce07d754cb11e4d5e1e628c.dll
Resource
win10v2004-20240221-en
Target
a2295cc05ce07d754cb11e4d5e1e628c
Size
6KB
MD5
a2295cc05ce07d754cb11e4d5e1e628c
SHA1
b2c07f38feae7f7ed730e22f9cc3f2a03e4bf422
SHA256
c25fb202b208038d57f96dcb47086cb05413c64d55f7f183c8220f5d970da006
SHA512
784cf42c4f147ddcff417d2b5b409ab105a69dba7bdd57ae9c041f4e6de744bc1eb56e40be8a72b8784efcdf9f2c30e893e7b3676a7db4ce0b25cb9f59ae0e45
SSDEEP
96:adGBjWf1zZcTiQParrDtxy0nYTT8rgyRCTjGyoXgC7cMWMl:adcQZcLParltgVyR2G/r7cMWI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a2295cc05ce07d754cb11e4d5e1e628c |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetDIPSHook
startNow
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ