_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
bc4fce85ddc8566cb3383dc039929acbb483e0e0f2cacbc8d1bd9dd28045465c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc4fce85ddc8566cb3383dc039929acbb483e0e0f2cacbc8d1bd9dd28045465c.dll
Resource
win10v2004-20221111-en
Target
bc4fce85ddc8566cb3383dc039929acbb483e0e0f2cacbc8d1bd9dd28045465c
Size
38KB
MD5
90a676dfd796586bdfc9f45ffa42aded
SHA1
2f5829c1cb1d95f5c75a104693d7ff8a1d61d230
SHA256
bc4fce85ddc8566cb3383dc039929acbb483e0e0f2cacbc8d1bd9dd28045465c
SHA512
353ea080a8168a26b1acacbdc84294638f25777a8e84b08621eca453d980c0b260d1076dc80de52fd0dc76fad426e8ea1acd3f4721811f2cd35b432206c23c2b
SSDEEP
768:z72EtfWfm+ZgTlShj1dESUOpP7KqjHEMc72pUnbcuyD7Ut:zSMfWOMQPSP2mH1ciUnouy8t
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE