StartHook2
StopHook2
Behavioral task
behavioral1
Sample
d3dbc9efc12e02322fcd920bbb96896b429d8c03721423056466bf0a31a076d3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3dbc9efc12e02322fcd920bbb96896b429d8c03721423056466bf0a31a076d3.dll
Resource
win10v2004-20221111-en
Target
d3dbc9efc12e02322fcd920bbb96896b429d8c03721423056466bf0a31a076d3
Size
22KB
MD5
c12011bc9da691298e2a3df4a39ea6b6
SHA1
aa220366da3c7d81260dff5e5c15cebd15a7ee48
SHA256
d3dbc9efc12e02322fcd920bbb96896b429d8c03721423056466bf0a31a076d3
SHA512
278bfbaf0b3ddfa47b6da14bbd223d0be51afa13e9ea1087af780457b746de8dbd1ebd4be9b47cf0fa6631bdc746a2a29f7edf626cf179ee42b37a62def65199
SSDEEP
384:Ms4s/UBxZLcVe5194nU2C9k/z3FqsJtIemgz76dQz2DfIMHjyzyifjgEuMImsIp/:MsFiLbX72C9kjFqQaGuWyfIMDAr5uxzG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
StartHook2
StopHook2
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ