DoAuthor
DoDescription
DoInit
DoMain
DoName
Behavioral task
behavioral1
Sample
afe32dfe14addc62ff17aca1d88484180da5b62c6aa917097124d1c8898b6c1b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afe32dfe14addc62ff17aca1d88484180da5b62c6aa917097124d1c8898b6c1b.dll
Resource
win10v2004-20220812-en
Target
afe32dfe14addc62ff17aca1d88484180da5b62c6aa917097124d1c8898b6c1b
Size
391KB
MD5
3db2dfe700b4c13b9868f14fce558109
SHA1
a0114a05acd5304093790c43f6e92c670b85ed28
SHA256
afe32dfe14addc62ff17aca1d88484180da5b62c6aa917097124d1c8898b6c1b
SHA512
89bd4a9b96f46538036df82fd27c171755ee845796ac87d742ffa2cb945151dc4c3d07971918b55f5ad71f54c7220ea8fef181192417dc5bf963f84239e05209
SSDEEP
6144:yeUB3/HgNcVRwYXtiBHDStr1YuPrVaGuZHowt1LisDaRKbuf5uO/GYE:yeUFsL2+DA15s5FRrLisDSKbsuOuY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DoAuthor
DoDescription
DoInit
DoMain
DoName
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE