fast
move
switc
Behavioral task
behavioral1
Sample
98b7d01a055a1f54853bef4e68a948a79cb5ddef010e8d2c8dc72aad3decdcee.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
98b7d01a055a1f54853bef4e68a948a79cb5ddef010e8d2c8dc72aad3decdcee.dll
Resource
win10v2004-20220812-en
Target
98b7d01a055a1f54853bef4e68a948a79cb5ddef010e8d2c8dc72aad3decdcee
Size
13KB
MD5
0912dbe3295e08b173e8905e82d17e00
SHA1
528a9e598a6b150477445bb1f73dcee7d5d8eeb8
SHA256
98b7d01a055a1f54853bef4e68a948a79cb5ddef010e8d2c8dc72aad3decdcee
SHA512
3ead34f5ef0fffbedebfec8a4584a1117f2a53a1d2def102b985b691bfb26e5956bad9cf3b1cff0522cc2762281c2aa25d959565be4e82e98b5a40b7fb8c6b35
SSDEEP
192:S6EA+3m92D98kaNh2gqJlGQMR1lE561DFaNJhLkwcud2DH9VwGfctUP:S68VD98ka/KPcRHEQaNJawcudoD7UI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
fast
move
switc
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE