DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
Behavioral task
behavioral1
Sample
a5216a420534ccb340707b25bb772b1e8a6bc6ae5cf7f838e97a9923de8c0f65.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a5216a420534ccb340707b25bb772b1e8a6bc6ae5cf7f838e97a9923de8c0f65.dll
Resource
win10v2004-20220812-en
Target
a5216a420534ccb340707b25bb772b1e8a6bc6ae5cf7f838e97a9923de8c0f65
Size
77KB
MD5
af2f049d8b77142e2b2b8f3d081ec17b
SHA1
d1facc619f34e891ac909cda4037ccf5893c47d4
SHA256
a5216a420534ccb340707b25bb772b1e8a6bc6ae5cf7f838e97a9923de8c0f65
SHA512
482dd4bcbeaef01ae7aee27c0e223f22c2ff27346d6a85e0d24af094fcd5cd8330d741b0efa16cdd45505ad2420e8dccb3ae4ebd9ea6eefe79a3caf3fa41e05b
SSDEEP
1536:/tizqrFvAS5xFzAOLTivgvPw705RssYWbNLzvNfNMljEfYoZ3d:1iOrBlxFMqMgnw7c7bNH1fNMWYO3d
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ