_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
e50e486bac955c0a8b9772a14232abd96cffc738456030338e308bc2bc0b83cf.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e50e486bac955c0a8b9772a14232abd96cffc738456030338e308bc2bc0b83cf.dll
Resource
win10v2004-20221111-en
Target
e50e486bac955c0a8b9772a14232abd96cffc738456030338e308bc2bc0b83cf
Size
34KB
MD5
11d5de84d225bde110818d9dc5a0c4fd
SHA1
c79db44ad0acd247a981b92b6476f1048b38f1c7
SHA256
e50e486bac955c0a8b9772a14232abd96cffc738456030338e308bc2bc0b83cf
SHA512
09761781eab5268531e9c3c3247a76562c27bfed36021668cc70ee3a33063f3c38dac9c6daeeefb102c939ef773dc2274c8d99b146fbce655251af5d4f05deb6
SSDEEP
768:VCF5NmgrMRaU4AhK7LTQhWnceirTE5T49wnbcuyD7UFKq:VDaMhoekcei3wnouy8FKq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE