CoPluginFree
CoPluginInit
CoPluginOption
CoPluginVerion
Static task
static1
Behavioral task
behavioral1
Sample
df696126e9bb99fdd59b20c66dca444a0d709f8ce012cf2d79ac31524df69a00.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
df696126e9bb99fdd59b20c66dca444a0d709f8ce012cf2d79ac31524df69a00.dll
Resource
win10v2004-20220812-en
Target
df696126e9bb99fdd59b20c66dca444a0d709f8ce012cf2d79ac31524df69a00
Size
292KB
MD5
3b1e2bd3c59322ac3c2ad063c6bb8cba
SHA1
dadc5e4dcd8a3dc1232a391492aa0f1a071a659f
SHA256
df696126e9bb99fdd59b20c66dca444a0d709f8ce012cf2d79ac31524df69a00
SHA512
dd1777deba4bacf80f2732a596b99cc815b2956877fef3da557e4f2a1687a43555963e2ee88ed891d726717fac8c3c3489b408f71a29f7f5d8fcbfb818f6f5db
SSDEEP
6144:1rD9+MprEM3lo7pPc1p5DRXrD9+MprEM3lo7pPc1p5DRl:tDEdM1oVU/DDEdM1oVU/N
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
MessageBoxA
CoPluginFree
CoPluginInit
CoPluginOption
CoPluginVerion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE