InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
8ed8ab9f5500d23ed39549b00c7c94a3b0789e9689941a6bcd601060c30d1b37.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8ed8ab9f5500d23ed39549b00c7c94a3b0789e9689941a6bcd601060c30d1b37.dll
Resource
win10v2004-20220812-en
Target
8ed8ab9f5500d23ed39549b00c7c94a3b0789e9689941a6bcd601060c30d1b37
Size
67KB
MD5
e77f256b8bb90c111716747ac99b01d9
SHA1
60295f3cdcdfaf5422fa31ebf11d8567377b14b1
SHA256
8ed8ab9f5500d23ed39549b00c7c94a3b0789e9689941a6bcd601060c30d1b37
SHA512
85f8276442738b5d14ab7061fa8eac192c9ec3b3c339a6ad10188ea911aad8f82acac9f0bc5f7d4d2b71091c37c5061d3c3527f538b2b5ea13d56d52ab9ff57c
SSDEEP
768:sw8cIZd1gay4rsSz46Cgi6vAA0aZ6bIJ2sseNK8Cig+jLMEMXx9+imoJNic/snwa:b8FBXz9C+phJ7seY9+DoJwc/snwEi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ