qn_ksHook
qn_tzHook
Behavioral task
behavioral1
Sample
d03692362fa9d414e334bb50917552d2e9f8424708b2778cf3480031df70d8e4.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d03692362fa9d414e334bb50917552d2e9f8424708b2778cf3480031df70d8e4.dll
Resource
win10v2004-20220901-en
Target
d03692362fa9d414e334bb50917552d2e9f8424708b2778cf3480031df70d8e4
Size
12KB
MD5
4aac17316bf9a0bdf3556aeacc96704b
SHA1
3d6aa869874024fc383da892eb737976f66b24c1
SHA256
d03692362fa9d414e334bb50917552d2e9f8424708b2778cf3480031df70d8e4
SHA512
baedfb1b0d965df36bd8063cc88df8a11ba4c37656798d53aed3b10f84d268d4480184fcbbe6e6e685f00b8170f10dfea38c579ae1eb18d4faff186ecaa063ae
SSDEEP
192:nrMyqtIeyBZ4UYoSm+K+UtgS1tKz6ZPipRV5PEhjMNM82BHMsFdlAS:IyqtVwmUImLAz+qpRbGm2CsFdlh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
qn_ksHook
qn_tzHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ