load
update_load
Behavioral task
behavioral1
Sample
cf082293fe8eeb398425702236df211dc86acc7ab8bfba8f6c9af77624b44983.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf082293fe8eeb398425702236df211dc86acc7ab8bfba8f6c9af77624b44983.dll
Resource
win10v2004-20220901-en
Target
cf082293fe8eeb398425702236df211dc86acc7ab8bfba8f6c9af77624b44983
Size
89KB
MD5
152af9378d5e99683050bc1900eb466a
SHA1
4909b07eae79981f7a228da2e3a2d9a5097b8553
SHA256
cf082293fe8eeb398425702236df211dc86acc7ab8bfba8f6c9af77624b44983
SHA512
d390bb1dbbf9c78dd159d572ff33c49046387f8c6ce7cedaabf9b9f15bbcd59d945bbb0c7c8f090bc587ffb8d89219193de593249b5ef83d527cdbe7f7b2b3ca
SSDEEP
1536:2mNF4If6CqiNy0zaP49nzy7m9eD5aGBnpVZddYTY5/nMN9fMHeejz:2mwP3iNOP49n4DD5aUVZdKTE/nlH9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
load
update_load
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ