DriverProc
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
9742a403afb1a9c78d29506dae853e8b52d263a5f76c933f83f47b81eee18b08.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9742a403afb1a9c78d29506dae853e8b52d263a5f76c933f83f47b81eee18b08.dll
Resource
win10v2004-20220812-en
Target
9742a403afb1a9c78d29506dae853e8b52d263a5f76c933f83f47b81eee18b08
Size
53KB
MD5
60a591382128a2c24f5068801ff3f2a0
SHA1
16b16b8f59fc4f3fa43c2b67622cbcef155da246
SHA256
9742a403afb1a9c78d29506dae853e8b52d263a5f76c933f83f47b81eee18b08
SHA512
291062cf92d061b06124d5965f91a1d604b1f7237c5682c79176cd9cf994dae5e13c3c655ace626fb5a6c5ed22abf234efc5a12231234862ac404977269f610c
SSDEEP
384:nF4DXuCTC+9BzGVKi46Z+cb226EYW46witrIRIWHVTzp/j/udCykmKk4zGsatUnz:aDXu0V3zGNSEYz6w9RVICVk8PuUG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DriverProc
modMessage
modmCallback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE