ISPI
UISPI
WSPStartup
Behavioral task
behavioral1
Sample
f4a48b3c83b4644ee832b97a307fe7bd31f5b29dd8cf3afb044447ab95e03f3a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f4a48b3c83b4644ee832b97a307fe7bd31f5b29dd8cf3afb044447ab95e03f3a.dll
Resource
win10v2004-20220812-en
Target
f4a48b3c83b4644ee832b97a307fe7bd31f5b29dd8cf3afb044447ab95e03f3a
Size
53KB
MD5
14ab5a620233304887114da4cc56941b
SHA1
a560f15ef842f1caabe68719d9fa24420c9f2b36
SHA256
f4a48b3c83b4644ee832b97a307fe7bd31f5b29dd8cf3afb044447ab95e03f3a
SHA512
c59d871a48133170364415149188cce2a475add6050e64ef1466b36397c16a134896e799692884b2136d2d831bb3b0bf8dd41e3beee19f8c193d4aa54a491785
SSDEEP
1536:tDYutQIfLJsp+G4Yr5r5j1hAdp4fk8Jdgq4:tDYurfLJsN75r3wEk2v4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ISPI
UISPI
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ