COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
Behavioral task
behavioral1
Sample
ba6ce2172134c4714b90bc6e668f6038.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba6ce2172134c4714b90bc6e668f6038.dll
Resource
win10v2004-20240226-en
Target
ba6ce2172134c4714b90bc6e668f6038
Size
215KB
MD5
ba6ce2172134c4714b90bc6e668f6038
SHA1
24fac9f15973f01dc00b1cdf8594360c25aa22bd
SHA256
939ad5ef78cbf0b13cb6be3fb5b908fe6c2e75f50215816e779bf0a4bb290b0f
SHA512
ddbb0e9d446438a3165dcdd3ec56d00c92818745bc3c2b5021d37a2dc59296f0f50885103a1cb4e814d1277dbed419f11d6ae023e0334ec70de3c6372961d006
SSDEEP
384:+0glSUf0jlL0BJBP1vMoH7NRoyp1aZMgK:+0g8Z0VP1koHxQZM1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ba6ce2172134c4714b90bc6e668f6038 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ