CFGAddPid
CFGDelPid
CFGInit
CFGUnInit
Behavioral task
behavioral1
Sample
adff777355e5e8a5a779adaf1feabe3c61f1d0b2374eeb2a66fc1216d63bfdb2.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
adff777355e5e8a5a779adaf1feabe3c61f1d0b2374eeb2a66fc1216d63bfdb2.dll
Resource
win10v2004-20220812-en
Target
adff777355e5e8a5a779adaf1feabe3c61f1d0b2374eeb2a66fc1216d63bfdb2
Size
20KB
MD5
c2063bca097876784fa2f8f03bb53664
SHA1
50b8d24aba7500d6a45944e1bf80ae61e7ff563c
SHA256
adff777355e5e8a5a779adaf1feabe3c61f1d0b2374eeb2a66fc1216d63bfdb2
SHA512
f9b9a759f85fcebb66352f6285ff99c9e704738e432e9dace5f000c9d5c7191ca127d6cae83c511af218ed84f7fa96309259dd8c2b4b9ccc953c7567f97a5a7f
SSDEEP
384:ikfDXF73hBYkXtIUSFPWNXci0HU5fGOmQXFb/VgW11l2:ikrHekXtIdRWBd0U5O9SDgWzl2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CFGAddPid
CFGDelPid
CFGInit
CFGUnInit
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ