InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
cc9d2cab7b4d9be54c669d9e9d6706a4.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cc9d2cab7b4d9be54c669d9e9d6706a4.dll
Resource
win10v2004-20240226-en
Target
cc9d2cab7b4d9be54c669d9e9d6706a4
Size
30KB
MD5
cc9d2cab7b4d9be54c669d9e9d6706a4
SHA1
c050ef2dacac3b05d233053e90ccaf4d1a4f66fe
SHA256
576028e0a2de8e4d7dd2551c9c2472b2e94b5c5434091b7470edeb1796c66ddd
SHA512
5f14c8cab6d8adfabb11f5221f916a5f43b1c8143c824c6f61b045b453399a506be9c647928fc5df8d58c07e8159eabd5caae7b61f99b63f72c5b1780808e8fb
SSDEEP
768:C+o8D05xnuqi2x7QXliaOSzixy7F5g6BcrsY/jFgaTO6/:rjD0HnuGKAMK2FrB6/jFJTO6/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cc9d2cab7b4d9be54c669d9e9d6706a4 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ