gnsjxjks
uxrlmbhth
wenmljmqsrv
Behavioral task
behavioral1
Sample
6d9b6c7b954b0b41cfe34557a513c79a2bdbc4e530dd674e2180ca7dc16498f6.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6d9b6c7b954b0b41cfe34557a513c79a2bdbc4e530dd674e2180ca7dc16498f6.dll
Resource
win10v2004-20220812-en
Target
6d9b6c7b954b0b41cfe34557a513c79a2bdbc4e530dd674e2180ca7dc16498f6
Size
127KB
MD5
0e9ede389047902236e789cb47942806
SHA1
c1d97ae7d56b68de135716ef99180646406b3457
SHA256
6d9b6c7b954b0b41cfe34557a513c79a2bdbc4e530dd674e2180ca7dc16498f6
SHA512
9c8a3bab5ab42ef384bdfdf4c0bf65274d67eabd65731a8a730c5f56c5e430e5acc751cf2a7bf8a174c5347a725ebe77907de06ee8a068d74cce035106b14a9a
SSDEEP
3072:07FpxQiATuvIVWK6982mb0WM4wQJ05AGwOruhxLDoutP:2Fr256i2mh70mx5hxLDoS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
gnsjxjks
uxrlmbhth
wenmljmqsrv
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE