AddAtomA
AddRefActCtx
AllocConsole
GetFnPath
s
Behavioral task
behavioral1
Sample
abf7e71317f61d6ed08b7b4e914863c0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
abf7e71317f61d6ed08b7b4e914863c0.dll
Resource
win10v2004-20240226-en
Target
abf7e71317f61d6ed08b7b4e914863c0
Size
45KB
MD5
abf7e71317f61d6ed08b7b4e914863c0
SHA1
3b4132bcf95cc5ef945b3481fbf71bc5a8258953
SHA256
5c9cbf0f569bcefc7b6dacf6493ebf3059352bf505c9b60c2803d36d7ff41b18
SHA512
8fe311e3d4998e4c1a404b1e83021f0cb710811ed0eb839ce0b1c81471e3395d6e1de1b264901686f5ec5f35ba6512477574d0c1d8c1a27517c2c7ea7a8c853e
SSDEEP
768:IkmrWuyrPD8nxFU7bTxyEli4cElTKUwR+3exBVnoTXf2kPqovMofdbXyO8KbjtbQ:IkUWuyD4nxFsyElgtUwY3yVqP2bLofno
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
abf7e71317f61d6ed08b7b4e914863c0 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AddAtomA
AddRefActCtx
AllocConsole
GetFnPath
s
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ