COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
Behavioral task
behavioral1
Sample
bd604e4826df886906ca034f869a441ed97d98dfbfd77431618046744617bba4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd604e4826df886906ca034f869a441ed97d98dfbfd77431618046744617bba4.dll
Resource
win10v2004-20221111-en
Target
bd604e4826df886906ca034f869a441ed97d98dfbfd77431618046744617bba4
Size
16KB
MD5
affc37214919fda2cb7ab14e66fbbb8e
SHA1
7b3405ad0a389a0260f257e0a631ed2dbfbb7418
SHA256
bd604e4826df886906ca034f869a441ed97d98dfbfd77431618046744617bba4
SHA512
112e99502396b047ca2541efc47819f6203e8842f188951887c8756454d813c509ec8f980aec7f0bd2e2349e8203d4e9ffc2b029dd33715b807e61ee4e43d9e5
SSDEEP
192:I5duhnh4My1Wk/ycHKXovoyAE+doMEauXmKYVzBUpv7/JNLm13aEOxeq5cyO7wyN:I5dudh4My1WOycqXowyA8CFVULAKxIDn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
COMResModuleInstance
JUFndB4pARSJ
QSTdR8vtujTSKh
dP5yRxpb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ