GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStop
Static task
static1
Behavioral task
behavioral1
Sample
850f438a59800e2ed15aa08ecfe8cb055287306596644eac5af01548a1482b3b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
850f438a59800e2ed15aa08ecfe8cb055287306596644eac5af01548a1482b3b.dll
Resource
win10v2004-20220901-en
Target
850f438a59800e2ed15aa08ecfe8cb055287306596644eac5af01548a1482b3b
Size
30KB
MD5
9bb9a79e9d41375249618e4ae1a33164
SHA1
36004ce42043c09ba708f1a4b4017df88ff55042
SHA256
850f438a59800e2ed15aa08ecfe8cb055287306596644eac5af01548a1482b3b
SHA512
8e925909abeddbc1c64f8a2d23f032d0bb936eb307a0053db506d4a94de20230b8bd267d7ba209763f3a1daeebe873476ae130b93af7b2bb8aa6b80b7776818a
SSDEEP
384:nOWYT4fKQyM01xndhDsuPN8WL1I5kRPDggKKgyK+CchBRVrogtZXHbFX0VQ6fbBK:KcKQt85N8WZIkrtgdczomXHbFX0P/Ard
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetPluginInfo
GetPluginResult
GetPluginRun
PluginFunc
PluginStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE