fyksHook
fytzHook
Behavioral task
behavioral1
Sample
b6c3aa62e9daf497deec9f57e01d4cfc.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b6c3aa62e9daf497deec9f57e01d4cfc.dll
Resource
win10v2004-20240226-en
Target
b6c3aa62e9daf497deec9f57e01d4cfc
Size
15KB
MD5
b6c3aa62e9daf497deec9f57e01d4cfc
SHA1
83d565e90bf7185218c0be240b60b4d771a6e6ec
SHA256
448d44684c0ecec406a77bc3191e6d1d810f7d0cf17950d3ae0be9bbf332f7ad
SHA512
2f4444fad3b371cd2aeb354958c73678437807964436b3337fce4b03a539b7b6408d08d5c27fc31c33f25b89e29d822f3bbb70dcddd58864ecc6e51bd61b818d
SSDEEP
384:HO6ehgIOPlMRSWv6/5vuYzcGwD5j7612fiaVRuEqKr:HONgVPlMRSWv6NuYORw0VRuE9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b6c3aa62e9daf497deec9f57e01d4cfc |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
fyksHook
fytzHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ