Keep_Live
Recv_Callback
Send_Callback
Behavioral task
behavioral1
Sample
ea50365ae430ba9ed9d29a32fcc058d6d9515e0640f81c4e9d172b45519184d8.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ea50365ae430ba9ed9d29a32fcc058d6d9515e0640f81c4e9d172b45519184d8.dll
Resource
win10v2004-20220812-en
Target
ea50365ae430ba9ed9d29a32fcc058d6d9515e0640f81c4e9d172b45519184d8
Size
36KB
MD5
42a5b04fa8acca4221d456517f0b328c
SHA1
7c9b51480246ccda5ade2ed908be678e793c8336
SHA256
ea50365ae430ba9ed9d29a32fcc058d6d9515e0640f81c4e9d172b45519184d8
SHA512
a290bc5818419c9c92b7507a6b61f8668b877534b9df1c1ad281767135c1c8267ff7d637e1f9d025a0bf329a19c87a7624cc9a4943abae827f7858c2184460b7
SSDEEP
768:XyFel4qY3LYVlxnLjFq9sJGFXgmB5Yor1tLQBAZvO:kqY7Yt/w9FfLL8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Keep_Live
Recv_Callback
Send_Callback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ