SetDIPSHook
startNow
Behavioral task
behavioral1
Sample
26c0b4beafef07967353e3d1817149751fcf69ad00d0f2ae5499edf5387d7306.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
26c0b4beafef07967353e3d1817149751fcf69ad00d0f2ae5499edf5387d7306.dll
Resource
win10v2004-20220901-en
Target
26c0b4beafef07967353e3d1817149751fcf69ad00d0f2ae5499edf5387d7306
Size
22KB
MD5
05c0ee95940d8b7573ed100c339c14f8
SHA1
a7809596af40bef82830f38c37fa9812402d5c8a
SHA256
26c0b4beafef07967353e3d1817149751fcf69ad00d0f2ae5499edf5387d7306
SHA512
31641dd6a9b604f88beeb04d25be460a6e06908156635c4ea43fa0cc246b5364f59e705d392f7e4289260ff71684b1895c3f42da98676d36a35c2cee142cb24f
SSDEEP
384:PfcvOcVaV9+hrwgiNYWPcWeMUr2lu6mr+A5tL2F5QviEujEVBsO3ZpNNGxjL6o7M:cHihUWeMw5tJ6PaBs6tDoI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetDIPSHook
startNow
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ