_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
cc0f3165150ddd73619c9236a7b12961154083ae09453b8159c880a872c5cc5d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cc0f3165150ddd73619c9236a7b12961154083ae09453b8159c880a872c5cc5d.dll
Resource
win10v2004-20220901-en
Target
cc0f3165150ddd73619c9236a7b12961154083ae09453b8159c880a872c5cc5d
Size
39KB
MD5
9d9fca1d17d5c92d51361ac34b32ca0a
SHA1
094f1d998219eab79b55210e17b6b7f90556b752
SHA256
cc0f3165150ddd73619c9236a7b12961154083ae09453b8159c880a872c5cc5d
SHA512
b3fff5bb5cdf7ed5a1ecc300062192a4e1ef0947de215b961b125b74759d79608d5b1563f0f586c5286fa1ec3cfa4cb13a41971e9ffab63b67348890ada22628
SSDEEP
768:yEnnNl9p0PMT267nBa2mjWPOHvnSNn39GvG/j4ueOnbcuyD7U9:x9peS21WPOPSd3Uknouy89
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE