GetEverEditorVersion
GetEverService
Behavioral task
behavioral1
Sample
0850b4639fbe72802cad924cc188e3b39655c13caaf4d91fc1b82c169f6ef8f1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0850b4639fbe72802cad924cc188e3b39655c13caaf4d91fc1b82c169f6ef8f1.dll
Resource
win10v2004-20221111-en
Target
0850b4639fbe72802cad924cc188e3b39655c13caaf4d91fc1b82c169f6ef8f1
Size
822KB
MD5
87d18d73458f06fcc0f13cd45ecc8c84
SHA1
880835f7416a992918128b7a50599c1245b146cd
SHA256
0850b4639fbe72802cad924cc188e3b39655c13caaf4d91fc1b82c169f6ef8f1
SHA512
66efcd4b9334d75eb18aa2c035c65b536b7e78b8cf873696e594872beca358e62781ef7aa8d1e9a7745e62546e1b84533259c6a7de8c6eb165ab5517f4905153
SSDEEP
24576:/YCHWxLbLD/IXoA9rwijG90lhgbfe5VbpAi0z2:/YLhLkXf90iC0hO+ZR0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetEverEditorVersion
GetEverService
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ