ASKTitle
BuffPool
DstDll
KUNone
ServiceMain
StartWin7Dll
WtoTimes
___CPPdebugHook
Behavioral task
behavioral1
Sample
ae714b38c5d2325176d02b97a798fee7d959bd7166786a730cf15c16f9de9dc0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ae714b38c5d2325176d02b97a798fee7d959bd7166786a730cf15c16f9de9dc0.dll
Resource
win10v2004-20220901-en
Target
ae714b38c5d2325176d02b97a798fee7d959bd7166786a730cf15c16f9de9dc0
Size
89KB
MD5
c386161ff2e79737685653340d1aa011
SHA1
0b7caf085e7a1047a616396924af9b113e7cce01
SHA256
ae714b38c5d2325176d02b97a798fee7d959bd7166786a730cf15c16f9de9dc0
SHA512
1a490e1d83cb01b8739fcf3cd68400eea8e6fdddef8a0fe13e53f1c005df3cb99db5a701c4a49cf53b81c18f5d8282018398280b8158a5a43969ddd0255424e2
SSDEEP
1536:2w1gX2yF59Kt+RAT1WvYQI0XaQWCMY+oJUHwKujgy6OnuuF0Ynouy8Ge:BezELcvYQ7K+V+oJCwKf9OnuuFpoutGe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
ASKTitle
BuffPool
DstDll
KUNone
ServiceMain
StartWin7Dll
WtoTimes
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE