DriverProc
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
e869caae412c776923022db87e31ebe29dcfbb039a3cd412b5956b6b82fdde25.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e869caae412c776923022db87e31ebe29dcfbb039a3cd412b5956b6b82fdde25.dll
Resource
win10v2004-20220812-en
Target
e869caae412c776923022db87e31ebe29dcfbb039a3cd412b5956b6b82fdde25
Size
55KB
MD5
60d1827827464a41ce83c289a31ca8c0
SHA1
1c40eea06c07f56055e4916c8cddd2972c8539dd
SHA256
e869caae412c776923022db87e31ebe29dcfbb039a3cd412b5956b6b82fdde25
SHA512
c6df5b274cffb98404812ffbd2d1d980ed30616d2e4539806d1f418096d9935cb6ac69d202c069d14b2cccc28f8ef5bed885dac5e7d95f53ea457864f3a9ef51
SSDEEP
768:iDXu0V3zGNSbztLvsMgZ9joEFvJ4B2PoTj:guMa7doEFvJ44Po/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DriverProc
modMessage
modmCallback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE