InstallHook
UninstallHook
Behavioral task
behavioral1
Sample
ba913ce39980ff4a02151245d7b48c04a0e67e0c1ee6aa1d086b87328fa6e626.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ba913ce39980ff4a02151245d7b48c04a0e67e0c1ee6aa1d086b87328fa6e626.dll
Resource
win10v2004-20220901-en
Target
ba913ce39980ff4a02151245d7b48c04a0e67e0c1ee6aa1d086b87328fa6e626
Size
67KB
MD5
21f83bd9bb6b3b8194dff4414ddf25d0
SHA1
9a2ed2b3be129c82f9b96f36865ebac5751504b1
SHA256
ba913ce39980ff4a02151245d7b48c04a0e67e0c1ee6aa1d086b87328fa6e626
SHA512
391cb2be33f20d3a8edf9d9f9ab2829a64bb99216932e291e9404192e7bbf1a9e93ba01009fc13d2577d4798a68c1651abb432a7aa04f87e1efe11611cab85c3
SSDEEP
1536:7nrxDussGn4AAejPC7Mp/c+HJgKKWz3p/wBBwf:D6tV0pk+pg6t/EKf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
InstallHook
UninstallHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ