AGMGetVersion
AGMInitialize
AGMTerminate
Behavioral task
behavioral1
Sample
2a9788f9d2e5606b821cf826ec5519bd24d6c8443fc11bb80574adeec43960e3.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2a9788f9d2e5606b821cf826ec5519bd24d6c8443fc11bb80574adeec43960e3.dll
Resource
win10v2004-20220812-en
Target
2a9788f9d2e5606b821cf826ec5519bd24d6c8443fc11bb80574adeec43960e3
Size
578KB
MD5
18f133b4d13a2d4744eeb051cde80c80
SHA1
aca408818449c3950c348d7a3137dc47053404a4
SHA256
2a9788f9d2e5606b821cf826ec5519bd24d6c8443fc11bb80574adeec43960e3
SHA512
585dae980d271a4e09ca55a68caca7863d128af810e55e10ce035d717c04cca3e455ae53269ff06d1ccb92bc8f931fa945d1f8c766077b3c1f6bc30be66181d6
SSDEEP
12288:jtODNW73NQ/Lhs5ltJ0qAUVIFfSFutb6bC77NdlfQfB0bdzd9LEY8qsEKNoSG:YDNWroLhcJ0EnF+WbCfNdlXdzHnKm
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
AGMGetVersion
AGMInitialize
AGMTerminate
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE