GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStop
Static task
static1
Behavioral task
behavioral1
Sample
28918788118ac9a6006e11cc3784cc5f0efc2efe137f56b2399a1069426987b0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28918788118ac9a6006e11cc3784cc5f0efc2efe137f56b2399a1069426987b0.dll
Resource
win10v2004-20220812-en
Target
28918788118ac9a6006e11cc3784cc5f0efc2efe137f56b2399a1069426987b0
Size
52KB
MD5
a18201f54a1334ad8d2e94a14ce7c0db
SHA1
c9741c489d3555aca97545cacc1c5967473a2f6d
SHA256
28918788118ac9a6006e11cc3784cc5f0efc2efe137f56b2399a1069426987b0
SHA512
14eeec78229dc165911b05eca57f9eba3683856504408b0562b27512c361cd5dee8e1a1b64677250c3ace33e94e781894324cef5c263c6d11dd335c9d1ba1042
SSDEEP
768:N5LhXuzPGdiRCWpdqOgjM9zRLIwkOexDjSk/ZrI8fN84Mtzl:HLwzPG4vpExM9NLIwkOS3SqI81840x
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE