COMResModuleInstance
X8d6wRhVPsmE3Ktxc
bZfkYxe7Rutfxwswj
cHzdWu7VyM8SdVD4r
Behavioral task
behavioral1
Sample
e6c2fd9a7cceab31da34745af831747ea63dec5f58732ca68bec4a66a7e6d5bf.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e6c2fd9a7cceab31da34745af831747ea63dec5f58732ca68bec4a66a7e6d5bf.dll
Resource
win10v2004-20220812-en
Target
e6c2fd9a7cceab31da34745af831747ea63dec5f58732ca68bec4a66a7e6d5bf
Size
16KB
MD5
0a788da14efb63a657454c999a2c50fc
SHA1
7e5cac77d5241d4e325e38f51d95d5a97c48edb0
SHA256
e6c2fd9a7cceab31da34745af831747ea63dec5f58732ca68bec4a66a7e6d5bf
SHA512
ec995c6caab471ac0619732c9ada91d1af9af8f48f4775db550d41f39794c6826ca15b11ab24cf5b15bd30f4a388d880ce56f8f6d3eee630354dfac5c6687fa1
SSDEEP
384:ZMvBC71cgNu2Wx1kp8pxKHatlDTVPIDXREwho/Cdm:mBC71cgNutxu+X7TDBPIiPCA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
COMResModuleInstance
X8d6wRhVPsmE3Ktxc
bZfkYxe7Rutfxwswj
cHzdWu7VyM8SdVD4r
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ