fj_Hook1
fj_Hook2
Behavioral task
behavioral1
Sample
025dba2fae83263ca8cd3f7d704173219023dae926ece4a35a9fbd642e793d3d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
025dba2fae83263ca8cd3f7d704173219023dae926ece4a35a9fbd642e793d3d.dll
Resource
win10v2004-20220812-en
Target
025dba2fae83263ca8cd3f7d704173219023dae926ece4a35a9fbd642e793d3d
Size
12KB
MD5
7ae3df2e30fd3e5f7d296debfe2edfa0
SHA1
5f1037652ac81ed0c50c103d03bdbfbd53be6af3
SHA256
025dba2fae83263ca8cd3f7d704173219023dae926ece4a35a9fbd642e793d3d
SHA512
059c2b3993c46cba790e16fbdae17d15b7269381de6ad375e3e85c171ec938d0338f05fcd8058bb21df4f1987882276368fcf457cdce9901a7c427173501233c
SSDEEP
192:nrjQP6AlhyAcib/97plSIqZEPIiLpjbcWbKYMR4G3DzC6jQccxEYPanhO:n/yyABPlSI5IiLdbhKXVQXEYPahO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
fj_Hook1
fj_Hook2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ