DllRegisterServer
DllUnregisterServer
ServiceMain
checks1
Behavioral task
behavioral1
Sample
c295ba9bad5aa449407a0a9480d42d00.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c295ba9bad5aa449407a0a9480d42d00.dll
Resource
win10v2004-20240226-en
Target
c295ba9bad5aa449407a0a9480d42d00
Size
331KB
MD5
c295ba9bad5aa449407a0a9480d42d00
SHA1
94a286a74fb6a44b96d070b03ec3abf16a2d3219
SHA256
6dfa783d5045366f734c121fabad26042377e67a1e3695fe405a39e10e0728a2
SHA512
7a4baa7d7d7d2fe635109e0506d367b67bce4527b138df6a9a30c54dceb373a9cc5f81c5b4bdf1025b7bb74999b696916b645d1e992cc6d337eda25833681431
SSDEEP
6144:Vr0JP6a0o1o71poAijQfPEJRJFKNk42JBY1M5B5G0kwN5DGW/NO:VgJPkBpijWnNaJBY12BxkwNz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c295ba9bad5aa449407a0a9480d42d00 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
ServiceMain
checks1
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ