KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
019a3a6be5570aec5a594225ace6608d2050066f752ba96c23a2b4db6178b7c8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
019a3a6be5570aec5a594225ace6608d2050066f752ba96c23a2b4db6178b7c8.dll
Resource
win10v2004-20220812-en
Target
019a3a6be5570aec5a594225ace6608d2050066f752ba96c23a2b4db6178b7c8
Size
7KB
MD5
6df000a28da10022e4aa364a74f8a625
SHA1
48001d09a8bb2da15f4813b6ea41dbdd3b80554b
SHA256
019a3a6be5570aec5a594225ace6608d2050066f752ba96c23a2b4db6178b7c8
SHA512
ea05789836703a795c22269ac4e0adb3cd4772e008fe8a1c811a315ddb00920dd7630fc554bbbfa400a263834b519d7ba4b98389d2a01e6ec54e6a03327649b3
SSDEEP
192:SUae5qA8T2plEpeq4bvOg4FRNZQ8fN2WibS:HaFFT2TZq4tyNZQ+Nhi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ