GetModule2
GetModuleAddr64
Get_pid
openhwnd
read_memory64_bytes
read_memory64_float
read_memory64_int
write_memory64_bytes
write_memory64_float
write_memory64_int
Behavioral task
behavioral1
Sample
14dc8d13d6a9e2cf72a27d553c9798faf5e79b9e09148123dd36360bb2b88344.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
14dc8d13d6a9e2cf72a27d553c9798faf5e79b9e09148123dd36360bb2b88344.dll
Resource
win10v2004-20240426-en
Target
14dc8d13d6a9e2cf72a27d553c9798faf5e79b9e09148123dd36360bb2b88344
Size
331KB
MD5
5ca0a8247a11ccb9ab9eff250c77912d
SHA1
011c0d06314dd5c1cee575222a79c66d799a2518
SHA256
14dc8d13d6a9e2cf72a27d553c9798faf5e79b9e09148123dd36360bb2b88344
SHA512
7c2a4f29c763334fae5efc3f8fbc73948e43c032f46c9769b9cddac3bb7aae659165f1323ac2da702d6bb91c7f43f283ee0179217e547d733b6cc705963d7a76
SSDEEP
6144:jo2wl/rES7QUIlbDkxeh/unT3vTe3cuGLmq0iOyDqmKIN5NgkhSwXU:826/rtWMxeh/uT3be60iOyGYFdXE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
14dc8d13d6a9e2cf72a27d553c9798faf5e79b9e09148123dd36360bb2b88344 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModule2
GetModuleAddr64
Get_pid
openhwnd
read_memory64_bytes
read_memory64_float
read_memory64_int
write_memory64_bytes
write_memory64_float
write_memory64_int
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ