plugin_reg_handoff
plugin_register
version
Behavioral task
behavioral1
Sample
648c1c9e49463a12837e557f38f983e3e6689e2833b43fb292f0a9da9f322531.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
648c1c9e49463a12837e557f38f983e3e6689e2833b43fb292f0a9da9f322531.dll
Resource
win10v2004-20240319-en
Target
648c1c9e49463a12837e557f38f983e3e6689e2833b43fb292f0a9da9f322531
Size
17KB
MD5
b29dbc040d94c39ff21aaa57fe7d1aa6
SHA1
12a347fe33195ac10b26a5e0aa437fd0e2bd090d
SHA256
648c1c9e49463a12837e557f38f983e3e6689e2833b43fb292f0a9da9f322531
SHA512
f132aa5ce57b2b80af849171b8c198c57fddc98b3b9dc05ceb8e8ebc33a61d81c3a49f0a1dbde7d31aedbe15534001b90d7055b797e6add1ea389a43eb9a7bf4
SSDEEP
384:dEE8BGrKLN2WVHGHpo4V+OOQ0MOBioZfyE4rX:dF8BGqPqV+BQNpoYl
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
648c1c9e49463a12837e557f38f983e3e6689e2833b43fb292f0a9da9f322531 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
plugin_reg_handoff
plugin_register
version
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ