Axe
Books
Daddy
Dreamy
Honor
showtitle
Terms
Behavioral task
behavioral1
Sample
a0d29d94b34309ff61249544b0bd7069fa053eea55fa142da176f40823dfa9ac.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0d29d94b34309ff61249544b0bd7069fa053eea55fa142da176f40823dfa9ac.dll
Resource
win10v2004-20221111-en
Target
a0d29d94b34309ff61249544b0bd7069fa053eea55fa142da176f40823dfa9ac
Size
541KB
MD5
70fe6d95a7e457816c32f83a033146f1
SHA1
70925001d93d749a0df165d3ff66662081a1c0fa
SHA256
a0d29d94b34309ff61249544b0bd7069fa053eea55fa142da176f40823dfa9ac
SHA512
ce08238e70812f2399c36a4b2f19991d1a7ef1110f605b2c3ba95989e68f04a5e8c56aa48c0796e116a36efde580c66806c87f55294e72644008b62e827b1a3c
SSDEEP
12288:D9lqhiU7HIRKK1mK3AoZZR08XqMaigoaqcN7t/Tijjo0:JjU7HIRBx3TVRX2jWc3T
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Axe
Books
Daddy
Dreamy
Honor
showtitle
Terms
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE