_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
ef2a9d361331d3f58eb25ce747b032352e4bab153baf266be171c568e905e1d6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef2a9d361331d3f58eb25ce747b032352e4bab153baf266be171c568e905e1d6.dll
Resource
win10v2004-20220812-en
Target
ef2a9d361331d3f58eb25ce747b032352e4bab153baf266be171c568e905e1d6
Size
41KB
MD5
27769997caed846e36f7b44bae798ef0
SHA1
b92015c4661400d02d3d31091345e3f9761e1f86
SHA256
ef2a9d361331d3f58eb25ce747b032352e4bab153baf266be171c568e905e1d6
SHA512
305e1002331d67d5a55dd8145666f0e558e959e0db6d9a8625b6de58c5fdff1e729596ffe1feeb12a773a7c7598d96f0280d3db7965e42570fcc604487ad5398
SSDEEP
768:qLWpEVdJbTudJ080hLgjERQ12ZKX1CjkpPKa6+iA0k9SitJnbcuyD7UX:9mdT98S0jENZY4aPtJnouy8X
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE