_LibMain@12
_SetHook
Behavioral task
behavioral1
Sample
ec09d005926bbbdb00e72e5e0ddf259fd8ea2f8b087d7655b3552af57b06a109.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec09d005926bbbdb00e72e5e0ddf259fd8ea2f8b087d7655b3552af57b06a109.dll
Resource
win10v2004-20220812-en
Target
ec09d005926bbbdb00e72e5e0ddf259fd8ea2f8b087d7655b3552af57b06a109
Size
6KB
MD5
1f94139d1783be4c5bf9bf29a8ae5020
SHA1
abbdbad5040af7e299999578f035c8eb04216555
SHA256
ec09d005926bbbdb00e72e5e0ddf259fd8ea2f8b087d7655b3552af57b06a109
SHA512
8d24d4f232f759080f3001b4c3775d2368679730b7af9056ab8ecb93ac7645d3d00804789de96b2e34aa842d5f6ed529f6a83d0609a55320d4a80a0b53e82ee1
SSDEEP
96:Qkuaa9hVKrMnYZTb2rs0HydF+UPrCviAeHUhLJiIvmaZh:Q/aa9hVvyTb2rvSuy+KXUNtVb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_LibMain@12
_SetHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ