ServiceMain
Service_Ctrl
Behavioral task
behavioral1
Sample
9e2ac48528cbe526172b9654457d52a5792b9ae33103a526dae67fa1e2303a1e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e2ac48528cbe526172b9654457d52a5792b9ae33103a526dae67fa1e2303a1e.dll
Resource
win10v2004-20220901-en
Target
9e2ac48528cbe526172b9654457d52a5792b9ae33103a526dae67fa1e2303a1e
Size
30KB
MD5
5d19fcab559ee813b7c12d84c2ceee81
SHA1
107de75abfe86ad6b364b843eb9773ea9e5a90a5
SHA256
9e2ac48528cbe526172b9654457d52a5792b9ae33103a526dae67fa1e2303a1e
SHA512
0494fe570d3f561fc3efc7dd3739770db63be0a1534c0ccc70c32abd4e0adc79d6bf094382d7f00fc7ef0d7c76cc59a9f76d17bbc2039f91aea42abc5e2f4e0a
SSDEEP
768:AWDn2kxfAvqiAiy/ZwMxALFZTcWsrSchBCXQ9:fnjxfhiAikKMxAHTcc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ServiceMain
Service_Ctrl
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ