InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
a39b0bb3162bb5941b3eafe6740ba7e1.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a39b0bb3162bb5941b3eafe6740ba7e1.dll
Resource
win10v2004-20240221-en
Target
a39b0bb3162bb5941b3eafe6740ba7e1
Size
30KB
MD5
a39b0bb3162bb5941b3eafe6740ba7e1
SHA1
a1fd82f6acaa45f20b42107bc45097046e0195d9
SHA256
648967b64bc270fd52e03862a9dac80b3b76498e6905bf6a2c9ab45af31ddc9b
SHA512
857a0431fdcdec42b58cf31b11d4d8ad2a736370e4bcdd27512720a9e7d3f970e05ffa9df46c42131f88641751a5f32cc5288914c92cc841f7615faa8db9c6ad
SSDEEP
384:v/w9evDyV2ILmlYUuhlP0jrXSE9tyWG3+bL5lQNuah5KY05Fw86EQId7+NdOtVpW:nhlIi0gjO2trGObFmN3MYWFf6EQfOFW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a39b0bb3162bb5941b3eafe6740ba7e1 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ