Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
e1c046f9320a1b4430239b63fa45b267.dll
Resource
win7-20240221-en
Target
e1c046f9320a1b4430239b63fa45b267
Size
710KB
MD5
e1c046f9320a1b4430239b63fa45b267
SHA1
7758e142bba8bc01009d99f96f4e3df365ed1e89
SHA256
bcb1323a77107248fcb3c9ef0fbd657e659ef1d57a634df174ad4a394195c17e
SHA512
b6c8454e151c3177e4274b14bede40a9341bd05df237976bde40a88f31e0a5e85f563620d713cd53eb4a0af1adaff61a08911b16401a6a1c291063ae354f2674
SSDEEP
12288:VJ1jIlA2YAwhuV1hP1VrD4V0Hj+W4szr6TuS7vPLeSXSFjtdVlO3SoCYg9qXuMIm:j1eQuV1JS9lVycTeSihPV+q/M+WwxIeq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CPlApplet
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnInstallW
DllUnregisterServer
Launch
ServiceMain
_Everything_CleanUp@0
_Everything_DeleteRunHistory@0
_Everything_Exit@0
_Everything_GetBuildNumber@0
_Everything_GetLastError@0
_Everything_GetMajorVersion@0
_Everything_GetMatchCase@0
_Everything_GetMatchPath@0
_Everything_GetMatchWholeWord@0
_Everything_GetMax@0
_Everything_GetMinorVersion@0
_Everything_GetNumFileResults@0
_Everything_GetNumFolderResults@0
_Everything_GetNumResults@0
_Everything_GetOffset@0
_Everything_GetRegex@0
_Everything_GetReplyID@0
_Everything_GetReplyWindow@0
_Everything_GetRequestFlags@0
_Everything_GetResultAttributes@4
_Everything_GetResultDateAccessed@8
_Everything_GetResultDateCreated@8
_Everything_GetResultDateModified@8
_Everything_GetResultDateRecentlyChanged@8
_Everything_GetResultDateRun@8
_Everything_GetResultExtensionA@4
_Everything_GetResultExtensionW@4
_Everything_GetResultFileListFileNameA@4
_Everything_GetResultFileListFileNameW@4
_Everything_GetResultFileNameA@4
_Everything_GetResultFileNameW@4
_Everything_GetResultFullPathNameA@12
_Everything_GetResultFullPathNameW@12
_Everything_GetResultHighlightedFileNameA@4
_Everything_GetResultHighlightedFileNameW@4
_Everything_GetResultHighlightedFullPathAndFileNameA@4
_Everything_GetResultHighlightedFullPathAndFileNameW@4
_Everything_GetResultHighlightedPathA@4
_Everything_GetResultHighlightedPathW@4
_Everything_GetResultListRequestFlags@0
_Everything_GetResultListSort@0
_Everything_GetResultPathA@4
_Everything_GetResultPathW@4
_Everything_GetResultRunCount@4
_Everything_GetResultSize@8
_Everything_GetRevision@0
_Everything_GetRunCountFromFileNameA@4
_Everything_GetRunCountFromFileNameW@4
_Everything_GetSearchA@0
_Everything_GetSearchW@0
_Everything_GetSort@0
_Everything_GetTargetMachine@0
_Everything_GetTotFileResults@0
_Everything_GetTotFolderResults@0
_Everything_GetTotResults@0
_Everything_IncRunCountFromFileNameA@4
_Everything_IncRunCountFromFileNameW@4
_Everything_IsAdmin@0
_Everything_IsAppData@0
_Everything_IsDBLoaded@0
_Everything_IsFileResult@4
_Everything_IsFolderResult@4
_Everything_IsQueryReply@16
_Everything_IsVolumeResult@4
_Everything_QueryA@4
_Everything_QueryW@4
_Everything_RebuildDB@0
_Everything_Reset@0
_Everything_SaveDB@0
_Everything_SaveRunHistory@0
_Everything_SetMatchCase@4
_Everything_SetMatchPath@4
_Everything_SetMatchWholeWord@4
_Everything_SetMax@4
_Everything_SetOffset@4
_Everything_SetRegex@4
_Everything_SetReplyID@4
_Everything_SetReplyWindow@4
_Everything_SetRequestFlags@4
_Everything_SetRunCountFromFileNameA@8
_Everything_SetRunCountFromFileNameW@8
_Everything_SetSearchA@4
_Everything_SetSearchW@4
_Everything_SetSort@4
_Everything_SortResultsByPath@0
_Everything_UpdateAllFolderIndexes@0
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ