Dll���ں���
GetVgaAllInfo
GetVgaTemp
_�����ӳ���
Behavioral task
behavioral1
Sample
e806a25f753e918c98a494d675bd67c97a11fc1a2b7769a894bc46bef9eed43c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e806a25f753e918c98a494d675bd67c97a11fc1a2b7769a894bc46bef9eed43c.dll
Resource
win10v2004-20240426-en
Target
e806a25f753e918c98a494d675bd67c97a11fc1a2b7769a894bc46bef9eed43c
Size
348KB
MD5
de9e8df726e483d424d8cafe50ad4ad2
SHA1
ac23eb175640709bedadd67f62e741430bab4d99
SHA256
e806a25f753e918c98a494d675bd67c97a11fc1a2b7769a894bc46bef9eed43c
SHA512
416d7d989baa45b911e6ba086daecd56dbb78dc25ed7f6d517ec13666407105e3cd5cd4deb15dba3162c2e68ff02747c02fd05bba395657c745ff4f3bf82031d
SSDEEP
6144:HIYjnbqlxE79UoJvMBdVsl9S/V7L165nq9prGPJ5x/YifNGq3mbaRNtFq4AJ8eSn:Ax49FvMBdVU2VA5qYXwmNEaR04fV
resource | yara_rule |
---|---|
sample | UPX |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e806a25f753e918c98a494d675bd67c97a11fc1a2b7769a894bc46bef9eed43c |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Dll���ں���
GetVgaAllInfo
GetVgaTemp
_�����ӳ���
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ