GetNewInf
GetNewSock
Behavioral task
behavioral1
Sample
99765d40891444b415026c7c0226fd08f758a283be3ecadb7037f2748c402518.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99765d40891444b415026c7c0226fd08f758a283be3ecadb7037f2748c402518.dll
Resource
win10v2004-20221111-en
Target
99765d40891444b415026c7c0226fd08f758a283be3ecadb7037f2748c402518
Size
371KB
MD5
2d79efb88d8909e58cd516e98baad160
SHA1
dbee64b703f111b48c9531318ff7ddc4622248c9
SHA256
99765d40891444b415026c7c0226fd08f758a283be3ecadb7037f2748c402518
SHA512
be0dced9c1c4f893d0d58efea2efbd89b91865f1c689012133ec0d91b7b3b7b18d31c9666c13169b7d54e8a442e2dabdc7bfd32f8528c96e2d965ee946266510
SSDEEP
6144:SuDa6MrmX9n3oXrKR0C5a505NabFF8r0gY6N/rC+AWyzjQo4z/UJSJmdzfs6ckoS:SuDa6MhDfFSr0YZ1A9XS7UJSm06joS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetNewInf
GetNewSock
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE