E_DeInit
E_GetNumResults
E_GetResultFileName
E_GetResultPath
E_Init
E_Query
E_SetRequestFlags
E_SetSearch
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
IsEverything.dll
Resource
win7-20240903-en
Target
d1728d2ba4ac77d67ae6d88540100bfa64046dd1e3644fbc98d44967b4b5dc39
Size
221KB
MD5
7b0d14dab84ce315f31c0e24618c465b
SHA1
ce9f6d057bd6430104570d68ac891677f6e4a88d
SHA256
d1728d2ba4ac77d67ae6d88540100bfa64046dd1e3644fbc98d44967b4b5dc39
SHA512
6dd63b8d52f6cc8002dacf8f97a8175d023b9125f711b83bac62e72a58f619c98c06714e8928de179012582373d25436d711da8775c01e80f1dd77a3cbc73a2f
SSDEEP
6144:TeeFRiF7lOUa2CMHsXe6MoUSTjKbQqdHXP9iYJO:TesGlOnhmuU+OUCH/VO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/IsEverything.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/IsEverything.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/IsEverything.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
E_DeInit
E_GetNumResults
E_GetResultFileName
E_GetResultPath
E_Init
E_Query
E_SetRequestFlags
E_SetSearch
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE