SetDIPSHook
startNow
Behavioral task
behavioral1
Sample
f46e5c037ecc2e25ccf7f07d081b0c81fced5a95ecd54b4d891acfac9af3c178.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f46e5c037ecc2e25ccf7f07d081b0c81fced5a95ecd54b4d891acfac9af3c178.dll
Resource
win10v2004-20221111-en
Target
f46e5c037ecc2e25ccf7f07d081b0c81fced5a95ecd54b4d891acfac9af3c178
Size
22KB
MD5
bdf94194c6def0f3e058c444e69056cb
SHA1
5e0b3b0d8b05c2c68722b70eafc485dfc0d9c46f
SHA256
f46e5c037ecc2e25ccf7f07d081b0c81fced5a95ecd54b4d891acfac9af3c178
SHA512
a996adaac9fac14a95927568c561788c7573157a0873f212f4aaf2fb707b1f1481ae5c9c91db5585378aab40666e2c21d7828163d24e4e17dc5e9a2fb8baf4ee
SSDEEP
384:ka9PVmS8sZ/7+igVF7Kh65j9FvC6gsY3y7Fp6ggVKE1vNcApOcBTH030z6XCMc:x9NmS8q/PgP7K4HRCJsY3M4NB1vNceOh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetDIPSHook
startNow
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ