_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
b0aefe8ad2dbbe339beaa2115d5e0096677f5193f623b9eea07f9ee58dda2a2d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b0aefe8ad2dbbe339beaa2115d5e0096677f5193f623b9eea07f9ee58dda2a2d.dll
Resource
win10v2004-20220812-en
Target
b0aefe8ad2dbbe339beaa2115d5e0096677f5193f623b9eea07f9ee58dda2a2d
Size
34KB
MD5
d9fd4e040c74c5fc92336d468482c153
SHA1
c562ef206021126473397c24f44eda4f50b35736
SHA256
b0aefe8ad2dbbe339beaa2115d5e0096677f5193f623b9eea07f9ee58dda2a2d
SHA512
f0f7c0cd3b7ac63dfa9e8534ad52d8e1dae4c21c4ff621ac8bc628a2119bfd983e99f6397cbc32af458c187b83a6349e9943927509a1d1e5014ebcf1e209b298
SSDEEP
768:0pGV1UPINmrzqM9MqPa9e8lv2qBQpj2ZXJqvpx+5UovnbcuyD7UFKq:0ppPIMfz9MqP39K0jXxxyRvnouy8FKq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE