jjj
kkk
xxx
Behavioral task
behavioral1
Sample
b7fb20fee7842d222bd091c83ea498cc.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7fb20fee7842d222bd091c83ea498cc.dll
Resource
win10v2004-20240226-en
Target
b7fb20fee7842d222bd091c83ea498cc
Size
10KB
MD5
b7fb20fee7842d222bd091c83ea498cc
SHA1
6d52464a7066e68caa432e5f6d6a0d6b722cfab9
SHA256
e8fe13f5e1772a979c2bd304e81fd0898d6f87bb5b57b5f95cd9ecad75e1cef0
SHA512
1d41e8dfa51c77940b51baedeff1cc02664ff5b2aa5c2bc6159ff39e5bd4dc064899db4d0f6b1dbdcc9e77d300622e4efaf84da5bbd511dc739a6b04ddeb7132
SSDEEP
192:omH3RQapn4SFvuPOxq1h2ONR1xqDuD0dSDfl/g8oxeO5xC71bstvgyANm/X:KC4SFmPOc2ON3xz0wfl/g8oxeOy7BoTT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7fb20fee7842d222bd091c83ea498cc |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ