Rool
ServiceMain
whm
Static task
static1
Behavioral task
behavioral1
Sample
a1907f0355e56d56d87b6ef44a58a585c8ccdceee2f262d4287c0aeb97ef38fa.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1907f0355e56d56d87b6ef44a58a585c8ccdceee2f262d4287c0aeb97ef38fa.dll
Resource
win10v2004-20221111-en
Target
a1907f0355e56d56d87b6ef44a58a585c8ccdceee2f262d4287c0aeb97ef38fa
Size
43KB
MD5
2f486bc4325d244eefa0c39ac7b85a78
SHA1
102931ed49266d882efc8fede7e505f063ac2504
SHA256
a1907f0355e56d56d87b6ef44a58a585c8ccdceee2f262d4287c0aeb97ef38fa
SHA512
9fe3bc37c460f80af0c78832baf4511b789278df1232e702ce37732231ea13979ff75a90f10a2c347400fc59756b14c869f26cf1d144413b645c5b63b36b8ff1
SSDEEP
768:xpUjOXJM3ywU1W1OvPszXFBkkjhDyqsanVjZBDRdxWsX0W2Unq4kCv:xiOXy3y0Ovm9R1dBD9WgT2SqFCv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Rool
ServiceMain
whm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE