_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
cb57894af8001af7706e99bb7096927c9c9b742f9c5732ddf514889ef2fcc556.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb57894af8001af7706e99bb7096927c9c9b742f9c5732ddf514889ef2fcc556.dll
Resource
win10v2004-20221111-en
Target
cb57894af8001af7706e99bb7096927c9c9b742f9c5732ddf514889ef2fcc556
Size
34KB
MD5
016edcd37cc171fcc36bc250d3ac2878
SHA1
97042d94042d5eccb23b91d4f8aa5179c7f298fb
SHA256
cb57894af8001af7706e99bb7096927c9c9b742f9c5732ddf514889ef2fcc556
SHA512
861739e0d39d235051382b10291698888bca5fef48ea9314ad83024e2db4b0e3c5e73b6055ff25d6af436ff0479f31690655a6fd61f271efdb09cfd71dc6169f
SSDEEP
768:ugeUxHpbt4Vw3N0e2YkDVjK4trS2x7SoI/9WOBw61PafhCnbcuyD7UAfa:uxUHt4Vwd0nYSZJko6FC4nouy8Afa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE