StartHook
StopHook
Behavioral task
behavioral1
Sample
f4fdef54d41ca60a6cb396e6ecf0dd70a2fe5a5a9bbe08fee1e88e1448b1e3f9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f4fdef54d41ca60a6cb396e6ecf0dd70a2fe5a5a9bbe08fee1e88e1448b1e3f9.dll
Resource
win10v2004-20220812-en
Target
f4fdef54d41ca60a6cb396e6ecf0dd70a2fe5a5a9bbe08fee1e88e1448b1e3f9
Size
17KB
MD5
a2fdaf3ce73aa51199da31efceda1717
SHA1
35319b149eb53e22d693f97464be496b4547e52f
SHA256
f4fdef54d41ca60a6cb396e6ecf0dd70a2fe5a5a9bbe08fee1e88e1448b1e3f9
SHA512
c7c763c2a166645f02e938275668db8c81cb761b257b19dafb7f3e72668a79ed1143a8f64c61cba221e7bfe47609dfa97b819c150952a0e991425e87baa6c1f9
SSDEEP
384:stQooY/lPc2wuijZwllssvg9l4+HtdmxL:s+GDmjZ6sdfux
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ