Outt
Sett
Behavioral task
behavioral1
Sample
bfb9bd1cac91f3b0ea391ea43bb2e560.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bfb9bd1cac91f3b0ea391ea43bb2e560.dll
Resource
win10v2004-20240226-en
Target
bfb9bd1cac91f3b0ea391ea43bb2e560
Size
55KB
MD5
bfb9bd1cac91f3b0ea391ea43bb2e560
SHA1
b9bd3722572c75fa4bf9f1660682dfc113a31a1e
SHA256
e0d9b81c67b55ec5ab7fbc2c5f48738ba37e8feb559f9873a498b1dfbaa32e6e
SHA512
32139e104f9fff49e459d3a3b4493066c94d9be397834edf68530441682c5a4698d72ba68505578be055032d5c1611a11487732b9b9e2044d8e9af22ccd0f7ca
SSDEEP
1536:Bm1NGJVGUX0+jmdUHpbrnXMacqYXBr/WaE+vA:kX0VBEw3cfVRWII
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bfb9bd1cac91f3b0ea391ea43bb2e560 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ