?Is_KBD_Disabled@@YAHXZ
?T3_KBD_Disable@@YAHHH@Z
Behavioral task
behavioral1
Sample
6a8ebee3fa2e526428705dd8944b964724dcdcae99e6a772d8ebb27d4d01f535.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6a8ebee3fa2e526428705dd8944b964724dcdcae99e6a772d8ebb27d4d01f535.dll
Resource
win10v2004-20220901-en
Target
6a8ebee3fa2e526428705dd8944b964724dcdcae99e6a772d8ebb27d4d01f535
Size
45KB
MD5
68300bca5eaf39e99584332ec58e96ac
SHA1
30e5ffa88a3e87080ede9dd865a93e56ab1dcbe5
SHA256
6a8ebee3fa2e526428705dd8944b964724dcdcae99e6a772d8ebb27d4d01f535
SHA512
8f1ccd68fd69b987d72e24434c4024d40bdd3dca3aca9aa94fbc5dd938cee977c7011781d1e273e59e0686fe2a5f164a833dd925f6e32659bacfcfc3993bf186
SSDEEP
768:Cvcer9pFuNK6IaK0wAxehk+W9z6WXFnZnezNMJHgZviTQHgWyf1ffGEIfrJNVN:CjvANn3uhhW9NXPeRVviTQHg3f1dIrH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
?Is_KBD_Disabled@@YAHXZ
?T3_KBD_Disable@@YAHHH@Z
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ