jcgengxing
jsqdll
spjiaocheng
xiaotieshi
Behavioral task
behavioral1
Sample
a9baa380b609c01c0933dbb4a36962dbbc45b135bfb30ccd8724a25d9ff03cfb.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a9baa380b609c01c0933dbb4a36962dbbc45b135bfb30ccd8724a25d9ff03cfb.dll
Resource
win10v2004-20230220-en
Target
a9baa380b609c01c0933dbb4a36962dbbc45b135bfb30ccd8724a25d9ff03cfb
Size
458KB
MD5
20ebc2d37358466077b5bceb05be780b
SHA1
626ee4e95e90e74b6531b0a2b2459a6cb7cb1374
SHA256
a9baa380b609c01c0933dbb4a36962dbbc45b135bfb30ccd8724a25d9ff03cfb
SHA512
7fc4afef68f73313c550a698d4dc63c9ebb8314b3e4f109726caca8a0f606c977bde0fde0e177ebea668aeaa0a61f617505f797a380dd701dbc297a73fae719b
SSDEEP
6144:PCHk/VHEDkViCc2supejFwHtAHjDoXMPfEbZMSbPQrPqWvbKM9g87W1afkz7YENi:GDkViqtpaF0ayPQrBvd9DqrDEFLu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
jcgengxing
jsqdll
spjiaocheng
xiaotieshi
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ