CreateUploadBOSDDumpThread
Dll���ں���
InitializeBugTrace
SetBOSDDumpInfo
UploadBOSDDump
Behavioral task
behavioral1
Sample
36df8099f5806ad6abad91f0e58ec7dd2d3430b0df579da7282cfffc1346b12d.dll
Resource
win7-20240729-en
Target
36df8099f5806ad6abad91f0e58ec7dd2d3430b0df579da7282cfffc1346b12d
Size
1.5MB
MD5
a258007a1dbf2f7ccfe9742b25ae3f95
SHA1
7940d005fd95ee9e81494a0e9b39940b2d4cd055
SHA256
36df8099f5806ad6abad91f0e58ec7dd2d3430b0df579da7282cfffc1346b12d
SHA512
ddc509b85ab993ab18a95b59036b69986d4aee44a024b7889508fa54cda96f1ca3c9ae43a327872bbb70aad3c8a8852fb250cbe048632639d63d160e5b150b13
SSDEEP
49152:CDLfsOvwl2BHF9ggH2J2xrqvZpuTbiED:eDCuFyYZqhpKD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
36df8099f5806ad6abad91f0e58ec7dd2d3430b0df579da7282cfffc1346b12d |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateUploadBOSDDumpThread
Dll���ں���
InitializeBugTrace
SetBOSDDumpInfo
UploadBOSDDump
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ