Keep_Live
Recv_Callback
Send_Callback
Behavioral task
behavioral1
Sample
878b0f16fd352e976284120625005a209ac2d5e6dbb525e8a2e9f64924e0db0f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
878b0f16fd352e976284120625005a209ac2d5e6dbb525e8a2e9f64924e0db0f.dll
Resource
win10v2004-20220812-en
Target
878b0f16fd352e976284120625005a209ac2d5e6dbb525e8a2e9f64924e0db0f
Size
36KB
MD5
5f872865f0bd46dcfdb6b8eb9ae58ef7
SHA1
c50290c4375338b785d2da1eac129f3537e9dccb
SHA256
878b0f16fd352e976284120625005a209ac2d5e6dbb525e8a2e9f64924e0db0f
SHA512
9262a0c5a96b21a2d0f7ec0de6f3de5627c0ec74b17c7383e75ad6afbf4aba75d6556c411868c779f3d08edada615c02c7bff7ae5d4c4bdf2c214497cf1f279c
SSDEEP
768:GyFel4qY3LYVlxnLjFq9sJGFXgmB5Yor1tLQBAZvO:NqY7Yt/w9FfLL8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Keep_Live
Recv_Callback
Send_Callback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ