ExecuteModule
GetBnModuleInfo
ProcessSupported
UninstallModule
Behavioral task
behavioral1
Sample
cdc53fa79a18b8928690f97cf9372a10.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cdc53fa79a18b8928690f97cf9372a10.dll
Resource
win10v2004-20240226-en
Target
cdc53fa79a18b8928690f97cf9372a10
Size
41KB
MD5
cdc53fa79a18b8928690f97cf9372a10
SHA1
b0405e0acbef189d9da45ea9d0e480deeaeeecff
SHA256
ca8c71e27cfaeada7aae259a653875eeaf56f90f4cdb872cda0b2cbf000e89fc
SHA512
8966e0834ac6408b4f61ee6c8af7ff257a809afad6a39c137f49115d6bd9a1b1b2e7cb2ac4e44733a1db08662799a958c0d7e3920e997ff3c19a4b1b5e714ae6
SSDEEP
768:IrjnFPWtsrSHceQEe0ha6GCjUsTo2sMh3me4cyx+/JBLMLsRrNNndOHam6:8jnZWeuH8EGhqnsMRme4cy+hDNcHz6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cdc53fa79a18b8928690f97cf9372a10 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExecuteModule
GetBnModuleInfo
ProcessSupported
UninstallModule
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ