_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
b792b0a3dff60add30d4edbf9c44415bde4397b43512f77cbebd08826c18b6aa.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b792b0a3dff60add30d4edbf9c44415bde4397b43512f77cbebd08826c18b6aa.dll
Resource
win10v2004-20220812-en
Target
b792b0a3dff60add30d4edbf9c44415bde4397b43512f77cbebd08826c18b6aa
Size
34KB
MD5
126ecc2c4485b70ed51bb26c5368a7e1
SHA1
85bffdc5d3f59c4b05a228894950229daa967acf
SHA256
b792b0a3dff60add30d4edbf9c44415bde4397b43512f77cbebd08826c18b6aa
SHA512
4644b5e8fecc6deffe607783aff2a42e7d26c7a5b78fb18f0b054d168b1209f4b32d7e273995dbd067a7874afd285192ea9301d7197bc0494f54571e9d670ef4
SSDEEP
768:F0VBiUwW8pS1WCr7jdRNhti1rydymdekZsLSUnbcuyD7UT6K:FChwnyWCb3CrydyWekGFnouy8T6K
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE