GetCommand
GetCommandCount
GetPluginDescription
Static task
static1
Behavioral task
behavioral1
Sample
0903af473f4f126102d7470154355045be98821acecf6a8af30160436bd48175.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0903af473f4f126102d7470154355045be98821acecf6a8af30160436bd48175.dll
Resource
win10v2004-20221111-en
Target
0903af473f4f126102d7470154355045be98821acecf6a8af30160436bd48175
Size
12KB
MD5
5a633a6d2b813b497e5b65b19eff43f2
SHA1
a7403a4619f23b10fdab4ea8089196d6c9e2e783
SHA256
0903af473f4f126102d7470154355045be98821acecf6a8af30160436bd48175
SHA512
758a39acc1a2d32a14e21bffb836c7658a807b4776ced35db0359a5f15cc9cab92ea0681ce6c71289810f2dd115e2d771a727c0a48399fe41b37fa9bbad7e737
SSDEEP
384:IYhJm7dBW8TumflrQu0GySSqS94KKmSkT3xk+:IYgPT1lrYHdiK9T3xk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCommand
GetCommandCount
GetPluginDescription
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE