DriverProc
modMessage
modmCallback
Static task
static1
Behavioral task
behavioral1
Sample
d3a35097b013d08a9a5b6faf985719ab7a504b8dce5328660ae015bfdfb3fd92.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3a35097b013d08a9a5b6faf985719ab7a504b8dce5328660ae015bfdfb3fd92.dll
Resource
win10v2004-20221111-en
Target
d3a35097b013d08a9a5b6faf985719ab7a504b8dce5328660ae015bfdfb3fd92
Size
63KB
MD5
20c0a1d64218809a8a2020b2701cb990
SHA1
c57981c83abd0b7b347d0aef2a63e0cb682c946a
SHA256
d3a35097b013d08a9a5b6faf985719ab7a504b8dce5328660ae015bfdfb3fd92
SHA512
8a9153abb96601472c92f71c1465f770ae01f551291638ec32006ae4278e97e40563633430217bf29b8dc7cbd0f710bd2efbf23b3917615b72dcaa3d5a39e596
SSDEEP
768:/DXu0V3zGNSeds+Qyae54HOat4SRFZOfX0mbnY6F:zuMaKsHID0fxF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DriverProc
modMessage
modmCallback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE