CallbackNotification
CloseOrder
OrderQrery
OrderUniformly
RefundQuery
Behavioral task
behavioral1
Sample
db837b90e4723fe97d38157a65932284e4e5ec2f7df54df6f31e9ad6baf18350.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
db837b90e4723fe97d38157a65932284e4e5ec2f7df54df6f31e9ad6baf18350.dll
Resource
win10v2004-20221111-en
Target
db837b90e4723fe97d38157a65932284e4e5ec2f7df54df6f31e9ad6baf18350
Size
6KB
MD5
59a55669bde30db0fe5870e8a8ce8c4c
SHA1
48fbe035318464d51cebe8f6a10f6d872f26152a
SHA256
db837b90e4723fe97d38157a65932284e4e5ec2f7df54df6f31e9ad6baf18350
SHA512
d02e8e03d0b6f0b720fa53f261941080e2b04c269c00fbc29cf254946a1f35a216fa6e53a85a27f3901bf35610fd10d296eb83e0418ead5b92f2f529aaba0dc1
SSDEEP
96:9m+Kezua5qvtdcDRaHScJ/snb+/42n2T3BD8wafo:9m+BqaucDoycJUnCA2cRD81f
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
CallbackNotification
CloseOrder
OrderQrery
OrderUniformly
RefundQuery
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ