main
mainA
mainW
Behavioral task
behavioral1
Sample
12de1ad90b5fd4cde8fc5edb7a518d91c071ede5ad0cd4154a9c644389f70359.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
12de1ad90b5fd4cde8fc5edb7a518d91c071ede5ad0cd4154a9c644389f70359.dll
Resource
win10v2004-20240709-en
Target
12de1ad90b5fd4cde8fc5edb7a518d91c071ede5ad0cd4154a9c644389f70359
Size
40KB
MD5
7f9a0ca1190efb5819b5abef3e091b12
SHA1
edfa0cceaa7438c75881c94976894d7040ccbc5a
SHA256
12de1ad90b5fd4cde8fc5edb7a518d91c071ede5ad0cd4154a9c644389f70359
SHA512
0fc7aeb53a0167c55bf6bd77eece5415ece8cedc3d64b124fbd42043c1ebf24541d753f2c511beb4c391f7ccc9d24958a146967fe43824538eff695e4ebd1ece
SSDEEP
768:LGqVRU6koWF/qFSkEiUkEQCPT+eXAxAbQ9ckoQpBeltXoECXhzH:6qVm6ZK/qF+SNeT+eQxA09ckoAeltYv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
12de1ad90b5fd4cde8fc5edb7a518d91c071ede5ad0cd4154a9c644389f70359 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
main
mainA
mainW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ