InstallU
PluginCommand
PluginMain
PluginName
PluginType
PluginVersion
WSPStartup
Behavioral task
behavioral1
Sample
599485e2199f7eb96c6a06c11891c850f59bff7d6b0e5d0685601929777951de.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
599485e2199f7eb96c6a06c11891c850f59bff7d6b0e5d0685601929777951de.dll
Resource
win10v2004-20220812-en
Target
599485e2199f7eb96c6a06c11891c850f59bff7d6b0e5d0685601929777951de
Size
97KB
MD5
802e52db6d02409403bd0074481ebf20
SHA1
feff814173f191083d2cc499cebc163c25aa2369
SHA256
599485e2199f7eb96c6a06c11891c850f59bff7d6b0e5d0685601929777951de
SHA512
1ee723a577bb2fe9b450c2cb2ef7573310313e1d8b5c905d67cbc3d36e2d4b36af43d29879952d5e7de3b8d8f6f01a2ea911b5950b6edc72a1752cb736c2e8a0
SSDEEP
1536:J95rLoJzyKPSmjP8JZ/aR6J+gkdjZSZFRoaZjU5p+Vf3mhnMtpDVVZk4K:J9dGzx5QJd6gJogjU5sw1MrK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
InstallU
PluginCommand
PluginMain
PluginName
PluginType
PluginVersion
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ