InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
d38c92a044fe6b70df88e33484c9b6ef.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d38c92a044fe6b70df88e33484c9b6ef.dll
Resource
win10v2004-20240226-en
Target
d38c92a044fe6b70df88e33484c9b6ef
Size
30KB
MD5
d38c92a044fe6b70df88e33484c9b6ef
SHA1
da7752045f6e5b03bfe6c287465541b7f596441b
SHA256
56fba0b1a02691877eb50661411e3bab6d6e70adf34f511c39f7567e4209a262
SHA512
feaa327a34561cbc18a1d4bb8a5f38a58cf2ea6d9108ce4eef18148ef310f41d18a0c54562e6c0307fc4750f66ffed07398643f3ec0309e5d2cd2fc6cc5e8de9
SSDEEP
768:pqWGSmijtK0wjFUxh9wyjSy10+oYot/7+rd9QA:pRqoK0wqxh2co+Dusd9QA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d38c92a044fe6b70df88e33484c9b6ef |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ