GetBufferSize
GetCylinders
GetHeads
GetIdeDiskInfo
GetModelNumber
GetRevisionNo
GetSectors
GetSerialNumber
Behavioral task
behavioral1
Sample
5dd6a11e1ec7d1209bfdbc7460fab68aacd478f8129064967a8de525d7a78b0f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5dd6a11e1ec7d1209bfdbc7460fab68aacd478f8129064967a8de525d7a78b0f.dll
Resource
win10v2004-20220901-en
Target
5dd6a11e1ec7d1209bfdbc7460fab68aacd478f8129064967a8de525d7a78b0f
Size
50KB
MD5
e8b780f785bba9d446c8de8bcbad55ba
SHA1
69bdda566bd0bb670a1ebe61df0d0fa924dfbd39
SHA256
5dd6a11e1ec7d1209bfdbc7460fab68aacd478f8129064967a8de525d7a78b0f
SHA512
96dc57c959f78df3ddf22ba11442eed1edd217794e4d26ee5d9cdd7516daf8867f31dbcd4afc6b119aa8bbdf68b3c7a9e2f81b782b3a35e500ec7e05eff82d82
SSDEEP
768:FU+SNjKJ8Bmjy+Z3bC1E7kmW3KtV22MYMRo6JKv61yWMs1Px7ZUiuzioKUVnu9:a9PcyaFZFeLYMRoS91yjMVZfGVKqnu9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetBufferSize
GetCylinders
GetHeads
GetIdeDiskInfo
GetModelNumber
GetRevisionNo
GetSectors
GetSerialNumber
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ