VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
Behavioral task
behavioral1
Sample
6c4d91544fec0dc9ac06e302ebba0db2539ba4daa740574ef78294a924089d09.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6c4d91544fec0dc9ac06e302ebba0db2539ba4daa740574ef78294a924089d09.dll
Resource
win10v2004-20220901-en
Target
6c4d91544fec0dc9ac06e302ebba0db2539ba4daa740574ef78294a924089d09
Size
7KB
MD5
fc8f84597fd5c38635114f2f23417135
SHA1
abb561d075becf987ba2333b0390e0a7acc464ad
SHA256
6c4d91544fec0dc9ac06e302ebba0db2539ba4daa740574ef78294a924089d09
SHA512
7d1a100bfe354b85422061dcb49d345100d01ad9c422ef0b069354e26aac36e0ce53310cc66822aed4d834523027fee55f5e1506ed567bab88280b3d5ae4dc13
SSDEEP
96:61p3tE4693cttttKZEqLaDiOhU9xzEpIfGorMpetV2EuFldhc3okdsIi:s3XW3ibQTOhIsIfK8huRhc3okdsI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VDMEnumTaskWOWEx
VDMTerminateTaskWOW
WSPStartup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ