main
mainA
mainW
Behavioral task
behavioral1
Sample
9cddabd78788cab0846e7349245bc91359e0bb583b852056355297e385c10222.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
9cddabd78788cab0846e7349245bc91359e0bb583b852056355297e385c10222.dll
Resource
win10v2004-20240709-en
Target
9cddabd78788cab0846e7349245bc91359e0bb583b852056355297e385c10222
Size
44KB
MD5
e8f8f6426c28f5bf88ea4582116e4769
SHA1
a0d466feafe217a4352f014454dcfb2ae478181e
SHA256
9cddabd78788cab0846e7349245bc91359e0bb583b852056355297e385c10222
SHA512
5f8c0b73a0f24428a2dbd57268d7a37880e3ad0955118a1e6697bb83a5439e425a6f7a55bf1f1b598aa0493b7442391ed39217e872f36f933d787fc246a954e1
SSDEEP
768:1aFK8Lf3jutMS8Pa3N2ImmM+BAbbAnqWuB2w3N2cHIaJsu8Y+FWZ4G8r0jopje2W:CK8Lf6ta0NxmmMgMEqWS34coa8Y9so21
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9cddabd78788cab0846e7349245bc91359e0bb583b852056355297e385c10222 |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
main
mainA
mainW
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ