DllRegisterServer
ServiceHandler
ServiceMain
Behavioral task
behavioral1
Sample
ae219f278ac04dcab55d6b2a2f70df18.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ae219f278ac04dcab55d6b2a2f70df18.dll
Resource
win10v2004-20240226-en
Target
ae219f278ac04dcab55d6b2a2f70df18
Size
26KB
MD5
ae219f278ac04dcab55d6b2a2f70df18
SHA1
f28dc16f7727d1fe9e5afba77182f243a4cdfec1
SHA256
0962877173532ad1db057af2d463edbbd4e2bab1fcc7fbc8803101e4e7c8d569
SHA512
71c95af164a862154d8fd96b6d94d6984c6315cefe410edbeb8cf409149f505f00183a3eeccd8b8e4342035cfd421af7fb6c42844bbff9c7ddbf2cfb15f9484e
SSDEEP
768:lVRbxpJoJvxI7USZptDCwv5M79RDgEEvMbXC:3RbPwvxI7UQrDCwvan+Mz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae219f278ac04dcab55d6b2a2f70df18 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllRegisterServer
ServiceHandler
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ