lxtub
vtdmg
xptcupl
xylutxzr
Behavioral task
behavioral1
Sample
f456bf4ac43e83d4ed57ca5f30fd5faa65653d10220efbd31366b6264c05a377.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f456bf4ac43e83d4ed57ca5f30fd5faa65653d10220efbd31366b6264c05a377.dll
Resource
win10v2004-20220812-en
Target
f456bf4ac43e83d4ed57ca5f30fd5faa65653d10220efbd31366b6264c05a377
Size
36KB
MD5
4dca092d7939e1dac6f3d39eaf353730
SHA1
d94e1f7fd56e3cf2ba56582e266d3da95178a8dd
SHA256
f456bf4ac43e83d4ed57ca5f30fd5faa65653d10220efbd31366b6264c05a377
SHA512
0631a9155559e783eb0c6b5a8dc79a5dfbb7be60ba45a460397834ee5424cdda9515243bfdf8c974badcaf0a62cf0b468d8b9ab8d84788a88fcc497a44228be0
SSDEEP
768:rnrzzhajYgGzN6yPQzNnkF0PFUWUeLabpru8mZqJ:7rzzhUEN6CQS2FNU5puzZY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
lxtub
vtdmg
xptcupl
xylutxzr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ