DisableKeyboardHook9X
EnableKeyBoardHook9X
StartHook
StopHook
Behavioral task
behavioral1
Sample
bf705dd7dc1f1e72e4484cad08aaa9b3.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf705dd7dc1f1e72e4484cad08aaa9b3.dll
Resource
win10v2004-20231215-en
Target
bf705dd7dc1f1e72e4484cad08aaa9b3
Size
20KB
MD5
bf705dd7dc1f1e72e4484cad08aaa9b3
SHA1
dc4f15b1483524ea544934fd50de50ad93bffa9e
SHA256
7913a45510b3f3288795c624530fb15e6c7e91e278970e2556e9e4318d4f1a53
SHA512
f09b0e875b5d9563e8e147c2edffd8845a2963df2c06355ad9f19672d83195b2009c1a44a56be6a2e55d031e884e90a79edc4b1024fb77187588e20d34d85fd6
SSDEEP
384:RJOHyKb5BE1U0CEpZIoYf7mNuEASGF/5aNd/bOVqSFYww9G:RcSKlBE+/cYSNuEASoxaD/bO4SFYww9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf705dd7dc1f1e72e4484cad08aaa9b3 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DisableKeyboardHook9X
EnableKeyBoardHook9X
StartHook
StopHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ