EnviarStream
GetChromePass
GetContactList
GetCurrentMSNSettings
GetMSNStatus
Mozilla3_5Password
SetMSNStatus
StartHttpProxy
Behavioral task
behavioral1
Sample
948f6e0f6719f2d3c8e250cb3acbd742f0e29e5d3714b079326088fb8fd0ec68.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
948f6e0f6719f2d3c8e250cb3acbd742f0e29e5d3714b079326088fb8fd0ec68.dll
Resource
win10v2004-20220812-en
Target
948f6e0f6719f2d3c8e250cb3acbd742f0e29e5d3714b079326088fb8fd0ec68
Size
1012KB
MD5
84ebe846b459e2030f23e52c84ee5386
SHA1
f9957035003fd5652fa03370dfd3c014a0a16845
SHA256
948f6e0f6719f2d3c8e250cb3acbd742f0e29e5d3714b079326088fb8fd0ec68
SHA512
3534af6827e14270df1d40ed39b6ca2580d60c49ed7ab0e3b762a9ef1fc4320b1a011c7ece27afbf5c38b4ea1048254cb74d184a6a78241b56d35a232c3feff8
SSDEEP
24576:SGejXIfEWVBd8qkdHcKM+/0GJjNzx/+sWj7RfFdDaD5JA:SGCXIfEWVvXsv/0CJt/+3RfFdDaFJA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
EnviarStream
GetChromePass
GetContactList
GetCurrentMSNSettings
GetMSNStatus
Mozilla3_5Password
SetMSNStatus
StartHttpProxy
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ