CreateRecToAvi
Run
Behavioral task
behavioral1
Sample
22ef9758c84e6bea84b9cb6e4ae676ad587a971baee8d4c01a56738796dd8551.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
22ef9758c84e6bea84b9cb6e4ae676ad587a971baee8d4c01a56738796dd8551.dll
Resource
win10v2004-20220812-en
Target
22ef9758c84e6bea84b9cb6e4ae676ad587a971baee8d4c01a56738796dd8551
Size
94KB
MD5
75c3b6993438dfe4ed19e70a3b588343
SHA1
b9fc33236c90684f12297323c6ffd281f0ca1ef7
SHA256
22ef9758c84e6bea84b9cb6e4ae676ad587a971baee8d4c01a56738796dd8551
SHA512
2febcf79cc2f145262f6ceb82ecc2c38e7ded44d8b13c93ac77a3267484e17d526d80dd2836119a33ef114c4e32420f8c1928e0ad1da385e56be64a13c0c2092
SSDEEP
1536:368WVCJa/KxQCUSD9lGfw7pZN8rl+n5MSBi5KjimHWU+JevnFUCAp0xk:3EY3FUSDTGfw7pZAl+nzi56iGr+UvF0B
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateRecToAvi
Run
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ