ServiceMain
ResetLMHK
Static task
static1
Behavioral task
behavioral1
Sample
95f3ebbaf1ca9ec87e1195a3c648c037b1fadebf95d2beb40e5a95ba4ccd08b9.dll
Resource
win7-20220812-en
Target
95f3ebbaf1ca9ec87e1195a3c648c037b1fadebf95d2beb40e5a95ba4ccd08b9
Size
94KB
MD5
90680c149afc581bb8d1e44c8fee0080
SHA1
4012806ff1f0ec4fd85a936875a3f07887dbbc94
SHA256
95f3ebbaf1ca9ec87e1195a3c648c037b1fadebf95d2beb40e5a95ba4ccd08b9
SHA512
c335e9494d2750af4188c530c0dbb27d8e5f1a634a231ee8ffeb278faa790f0334045b11674dd3fce6ca2cf47cce342272509e4152a33dddf33f4a0e9c2bfdc4
SSDEEP
768:/mhyiMrFFocw9KpbdU77mME4Ykl/xdsMHJZ8DP5bkJqbDXMe4647hMEpG:/mhShXpbS7K/4Pl/x6MHHY5YJyc7h3U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ServiceMain
ResetLMHK
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE