InstallHook
UnInstallHook
Behavioral task
behavioral1
Sample
efafceea6a8256e35b4819222c97ba5bd5af4dd12e543a3753441a1832f4a26f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efafceea6a8256e35b4819222c97ba5bd5af4dd12e543a3753441a1832f4a26f.dll
Resource
win10v2004-20220812-en
Target
efafceea6a8256e35b4819222c97ba5bd5af4dd12e543a3753441a1832f4a26f
Size
75KB
MD5
838526a4e192021f0fe348d1a0b3f3e0
SHA1
e5978f7c9abb5f3093812d26f148e37748f0e911
SHA256
efafceea6a8256e35b4819222c97ba5bd5af4dd12e543a3753441a1832f4a26f
SHA512
2b8d5d2ee472444ca5af7ca8ecc19676b4ec3c6048ec5f3ae091a163ee038fdd345c9806bcc84b396c6ae4de334733b0c4eab3fa6f072882a9a3e7463dae88ac
SSDEEP
1536:ZyxR892h1kruRLMviQM7hDOfaSKF51jMPrJwSMIJwRGK:ZSDwuRRQKJOmFvjMjdwRf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InstallHook
UnInstallHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ