GetLevelAndItem
SetDIPSHook
SetMIRSHook
Behavioral task
behavioral1
Sample
eae982d299b09aed83d027bdf39dcdb41b72d63b74f1a0764a19e27b2a96b9c5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eae982d299b09aed83d027bdf39dcdb41b72d63b74f1a0764a19e27b2a96b9c5.dll
Resource
win10v2004-20220812-en
Target
eae982d299b09aed83d027bdf39dcdb41b72d63b74f1a0764a19e27b2a96b9c5
Size
6KB
MD5
a61db8a78257fd8e44e9edf8fc9dfbc3
SHA1
4e8383dfbc0b4df822874da5cd53e3ad021d190c
SHA256
eae982d299b09aed83d027bdf39dcdb41b72d63b74f1a0764a19e27b2a96b9c5
SHA512
0b3c50a991a09fd79a2402a807660f3162b38d5ded26fb5fa9ef6cd81010c7d6800291de9ec7c773f4ce062a4eb50faad12251ee9b86ed8a31bc8574858c7a6a
SSDEEP
96:aEh5WAecZ+5LklUABe01MOtQ00aVwU2X4E:Ph8AjZYLkKr0170H
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetLevelAndItem
SetDIPSHook
SetMIRSHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ