CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
i
Behavioral task
behavioral1
Sample
4984d7c6cb6650f54087d96ee5a78a3f30428b24a7332db194a2e7d481702bda.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4984d7c6cb6650f54087d96ee5a78a3f30428b24a7332db194a2e7d481702bda.dll
Resource
win10v2004-20221111-en
Target
4984d7c6cb6650f54087d96ee5a78a3f30428b24a7332db194a2e7d481702bda
Size
14KB
MD5
40b4518ea2e8eac0e82d977290356ed0
SHA1
ac93de5b79fcfb17a1cc44b9cfdc1dd506cf2bdf
SHA256
4984d7c6cb6650f54087d96ee5a78a3f30428b24a7332db194a2e7d481702bda
SHA512
17785297a0a209c02b8bd525e38e40e1055ff9c23a533c4f941c0d2e6e44befb27a9734d9c0591808d875bf2e7cfd52ae1b1719b6a6a13016484082834024944
SSDEEP
384:CNdHUS6XIFsgG76imQSw3cN3xfL0kBmmbHxGWHIlaSQDL:9IFsgGHPsBFxGWolID
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CoGetComCatalog
GetRPCSSInfo
ServiceMain
WhichService
i
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ