SetDIPSHook
SetEnumHook
Behavioral task
behavioral1
Sample
7a64be00aaffca988d8738f4b327fe23b1b54e3b94c9f47969a29993906f1017.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7a64be00aaffca988d8738f4b327fe23b1b54e3b94c9f47969a29993906f1017.dll
Resource
win10v2004-20220901-en
Target
7a64be00aaffca988d8738f4b327fe23b1b54e3b94c9f47969a29993906f1017
Size
6KB
MD5
0b46662d299689be91cbad6d3d94902a
SHA1
24e8b8a5af75500f3d25a93397421434182ed422
SHA256
7a64be00aaffca988d8738f4b327fe23b1b54e3b94c9f47969a29993906f1017
SHA512
f479b6ac535416b5b2b646ba314063ddc790226d19e165f5cc13908db604507759f190d46ae1db8ff64dcde91e9a8d477841c106d3ad2de3c3ab2ff27fb8b291
SSDEEP
96:Z7c0IZQ+yRdSL8sVsgt7oGleFfxLQGIn4nC:Z7wO+eSIw6EVy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetDIPSHook
SetEnumHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ