GetNewInf
GetNewSock
Behavioral task
behavioral1
Sample
dfbee911389a5fd0b51a6adf9b4ede84.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfbee911389a5fd0b51a6adf9b4ede84.dll
Resource
win10v2004-20231215-en
Target
dfbee911389a5fd0b51a6adf9b4ede84
Size
405KB
MD5
dfbee911389a5fd0b51a6adf9b4ede84
SHA1
d16b17e95d4a26e9fd9218cfa437ba38f01de5be
SHA256
a94f68ed336071708f0891baa692aae8853c59ea455a36e271ded8f37e35f7fe
SHA512
9e1df3f615d91f2c758dada9f714c24ebe01236734ccf2fa481c1f70f6ad55218dbb830989fb309e3ce2c43a8af0f8871f785365f631caaa601a8733cb13df95
SSDEEP
12288:qVkXftkKBBIY456d5tlaDqmTBvvOHqEpIc:2kviGBq54jovGKcI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dfbee911389a5fd0b51a6adf9b4ede84 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetNewInf
GetNewSock
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ