FF00
FF01
FF02
FF03
FF04
FF05
FF06
FF07
FF08
FF09
FF10
FF11
FF12
FF13
FF14
FF15
FF16
FF17
FF18
FF19
FF20
FF21
FF22
FF23
FF24
Static task
static1
Behavioral task
behavioral1
Sample
690e9edc80ef8befa342fc53c29408224c1996804a48e1338db1462b48e00b76.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
690e9edc80ef8befa342fc53c29408224c1996804a48e1338db1462b48e00b76.dll
Resource
win10v2004-20221111-en
Target
690e9edc80ef8befa342fc53c29408224c1996804a48e1338db1462b48e00b76
Size
554KB
MD5
5caa89be8b60f1aa3e844de86c93c018
SHA1
661dc463d4e92761f9a563303c09f2433f9176fa
SHA256
690e9edc80ef8befa342fc53c29408224c1996804a48e1338db1462b48e00b76
SHA512
2ba73ce38291e288ff4604ed03a1e3e0606ea152ed4418b39fe99552c45ce5f921464130b494b896ae686db342a5ccc9389ca9dd1af51cdf1cafa6200ab00873
SSDEEP
12288:aIDaihdHlTsWa2B1i+xQqvxAF4KdvbJp8ZottaCLFQm9h+3WMX0dCcV:aIeiLHpsWae1/5pDKlb8QvL2a+3WccV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.
resource | yara_rule |
---|---|
sample | patched_upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FF00
FF01
FF02
FF03
FF04
FF05
FF06
FF07
FF08
FF09
FF10
FF11
FF12
FF13
FF14
FF15
FF16
FF17
FF18
FF19
FF20
FF21
FF22
FF23
FF24
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE