Install
ServiceHandler
ServiceMain
ThreadGetQInfo
Update
Behavioral task
behavioral1
Sample
ca419daac91a6440fc5df5425e8ff727e3d89e2de42c36abf8ea897df5a20ea4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca419daac91a6440fc5df5425e8ff727e3d89e2de42c36abf8ea897df5a20ea4.dll
Resource
win10v2004-20220812-en
Target
ca419daac91a6440fc5df5425e8ff727e3d89e2de42c36abf8ea897df5a20ea4
Size
20KB
MD5
803b1a77f6e765dc02584787b6d8a6c3
SHA1
6efc1acca236546f43651b65f9472ee5fb5fa885
SHA256
ca419daac91a6440fc5df5425e8ff727e3d89e2de42c36abf8ea897df5a20ea4
SHA512
758835d769b8d5a3d8bebc66c5e3c9ce87312e2ecb68a90b92fe729f2b968d9d3d90f8fb366e80f63f7f3f3ed54cd069f31e65707ce2e9d0ffea59d9dbf4c0e2
SSDEEP
384:mWDi7S1jBvNg3uRw7fO6BQttV5M+mYXwNIeYFUfKR/Hhwk5rWf+7XMDPaWUOW5N:mWE4jBvNg3uRw7f+V7BwNIeuXpBt5if2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Install
ServiceHandler
ServiceMain
ThreadGetQInfo
Update
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE