TERCEIRIZADA
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
3ef56fb19994148a7a18c028e6f04685fcdaa8077755639b9c34edb4a548d8e6.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3ef56fb19994148a7a18c028e6f04685fcdaa8077755639b9c34edb4a548d8e6.dll
Resource
win10v2004-20220414-en
Target
3ef56fb19994148a7a18c028e6f04685fcdaa8077755639b9c34edb4a548d8e6
Size
1.1MB
MD5
abb3a1591d419e3980c306b3603f768e
SHA1
bd8053fc82663c618b7f48ecb44aeda13b501438
SHA256
3ef56fb19994148a7a18c028e6f04685fcdaa8077755639b9c34edb4a548d8e6
SHA512
7a6f85fb350a6b62a296b5cbf405cbdc5a0fe3625d8fafc4f84eee1ba2d84827f63ca9bd65d1edffa7209e87f22468f028414dce2abcefc75ec37e1e983e126f
SSDEEP
24576:ncNTtRNcQDiDq4j2TvTPj1j/Ic2mO6Y3RhKNO7n3aCtu:cNTtz7Die4qTvN/XgjyO7n3aAu
Processes:
resource | yara_rule |
---|---|
static1/unpack001/out.upx | family_numando |
Detects file using ACProtect software.
Processes:
resource | yara_rule |
---|---|
sample | acprotect |
Processes:
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TERCEIRIZADA
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ