CallNext
SaveImage
UninHook
Behavioral task
behavioral1
Sample
9ed56e774d25ddc81c4fb13ead7aa7bbf21cd814d01857da1cf6020dea1bc73a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ed56e774d25ddc81c4fb13ead7aa7bbf21cd814d01857da1cf6020dea1bc73a.dll
Resource
win10v2004-20220812-en
Target
9ed56e774d25ddc81c4fb13ead7aa7bbf21cd814d01857da1cf6020dea1bc73a
Size
624KB
MD5
2d40578795b17471d145283289e495c7
SHA1
715a6a491410897dc52e86fcd0d73bad669a96e3
SHA256
9ed56e774d25ddc81c4fb13ead7aa7bbf21cd814d01857da1cf6020dea1bc73a
SHA512
cc94851baad7c838d2edb71110b44a610831a68878bc4f4a3af11fc87ec83cfca99ef338c553280856f19339c888ab284f8e4eb2df5b1ac8affb831debe1621f
SSDEEP
12288:kjh+VsTUlo/W9V+t7iu6wjYbyu5+BK2OlsKy78uWTFm2DSy4EqtJoS:kNUyU2/ZegjYDYBp55wj5Sy4Bt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CallNext
SaveImage
UninHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE