??0smss@@QAE@XZ
??1smss@@QAE@XZ
??4smss@@QAEAAV0@ABV0@@Z
?rsacnReslut@@YAXXZ
scanMiddle
scanbegin
Static task
static1
Behavioral task
behavioral1
Sample
852bf56ca060666b395ded9bcd8a812dfd8a0313157f8474b655ee8c19c9b354.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
852bf56ca060666b395ded9bcd8a812dfd8a0313157f8474b655ee8c19c9b354.dll
Resource
win10v2004-20220812-en
Target
852bf56ca060666b395ded9bcd8a812dfd8a0313157f8474b655ee8c19c9b354
Size
387KB
MD5
60e30f081520c8c7df85c0f9ce907438
SHA1
85ade5525ecfc8b462875ec42d39072b3752b3c5
SHA256
852bf56ca060666b395ded9bcd8a812dfd8a0313157f8474b655ee8c19c9b354
SHA512
6775a582a38dfd53ed31648cac5ecb8266f4b540bb514d227975ac547cbea448981456f553275da973d650929103fab6fdfc97bb8fd17bcbe641bd4efb4ed7eb
SSDEEP
12288:/8ua/pN9Fcnl4ZqDafQN0o7zVj0CT63zrs//:VaxLuGIN0oviCT6Dw//
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??0smss@@QAE@XZ
??1smss@@QAE@XZ
??4smss@@QAEAAV0@ABV0@@Z
?rsacnReslut@@YAXXZ
scanMiddle
scanbegin
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE