DLFT_SetTrackerRepor�Q�Fl.csw
DLFT_Shutdown
DLFT_Startup
Behavioral task
behavioral1
Sample
1a96a26b4c1f02c17f4c4a411424b2ac41bd78e0311b4a69260adfbb533d4585.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1a96a26b4c1f02c17f4c4a411424b2ac41bd78e0311b4a69260adfbb533d4585.dll
Resource
win10v2004-20220901-en
Target
1a96a26b4c1f02c17f4c4a411424b2ac41bd78e0311b4a69260adfbb533d4585
Size
135KB
MD5
f756abe88666fbe4b077857efc38a900
SHA1
2701ce2e97de941da69f13105d13e15fab1a7009
SHA256
1a96a26b4c1f02c17f4c4a411424b2ac41bd78e0311b4a69260adfbb533d4585
SHA512
83c79dfd522c4229edc9601b7d17cc1b47843097480fc649fe089199395b6e60fcb5ae5d660025d88ab2d18b4e4cd440c0edf0981f123c8827c48a21124f61dd
SSDEEP
3072:cmYJVhFLE9CL8nOJdvsrdsn/7T/sT5wHKgyjdfpiAFNlvia2wCe1d:PmxQY8nwUrC/7YSHHyf1FPIwCe1d
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DLFT_SetTrackerRepor�Q�Fl.csw
DLFT_Shutdown
DLFT_Startup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ