Mywork
ServiceMain
Behavioral task
behavioral1
Sample
f8f73da3a552be3022e7aa6538d31f43d6b410d6083cf48a895f408df660a89e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8f73da3a552be3022e7aa6538d31f43d6b410d6083cf48a895f408df660a89e.dll
Resource
win10v2004-20220901-en
Target
f8f73da3a552be3022e7aa6538d31f43d6b410d6083cf48a895f408df660a89e
Size
21KB
MD5
0ce143cda2bb97b2b00c840a9b8b71d8
SHA1
cd05b365ca0b6d6b9ad25f9180cbc35ef6b369c7
SHA256
f8f73da3a552be3022e7aa6538d31f43d6b410d6083cf48a895f408df660a89e
SHA512
f2f447db3763228b23c4485434905ddb8e52d8906a8ef781c4127f3360abff5f74406b07e6efba5fbf37c039c2bb1424a95971db082329f7c53830481e9dfb0d
SSDEEP
384:9w2fzhxC+iyYBx6jJejpTymN6TrydVuNN9fGFDnjkMcRfEVn4pLhd+pvq1n:621xCXhx6YjV6XwVo+F7wRfWELhdwq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Mywork
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ