About
AllocMem
CodeInjection
ReadArray
ReadByte
ReadFloat
ReadInt
SigScan
WriteArray
WriteByte
WriteFloat
WriteInt
Behavioral task
behavioral1
Sample
a0b92b3f7a3fb65ee8918d37e8766402ebc572dfb09b8d57f521f28d83871d7b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a0b92b3f7a3fb65ee8918d37e8766402ebc572dfb09b8d57f521f28d83871d7b.dll
Resource
win10v2004-20221111-en
Target
a0b92b3f7a3fb65ee8918d37e8766402ebc572dfb09b8d57f521f28d83871d7b
Size
250KB
MD5
8f9ae3f906cc0aff49632075cdd12cf0
SHA1
3eaa5cda46409e6aaab1547f260263f0a84b94b6
SHA256
a0b92b3f7a3fb65ee8918d37e8766402ebc572dfb09b8d57f521f28d83871d7b
SHA512
670fc7acd84adeaf6b6227f0c3457b026e4a9816a16dd5d29a9b3e46f8b28d4a48baa8c9d50bcb9c8615a2b30ee66c939f9e388575c4ffc972cdcbe8e5fdf3c8
SSDEEP
6144:/hcpfRTUFj9oaou8sXs5g3X7NWNOeuhjYKUgAZnu11Cl:/hMUBoacsp3LNgupUgAIm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
About
AllocMem
CodeInjection
ReadArray
ReadByte
ReadFloat
ReadInt
SigScan
WriteArray
WriteByte
WriteFloat
WriteInt
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ