GetLevelAndItem
SetDIPSHook
SetMIRSHook
Behavioral task
behavioral1
Sample
19daa0234c02ec6df98a9e9b0bb1579df00c4fb36f69ce27a89580878507374a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
19daa0234c02ec6df98a9e9b0bb1579df00c4fb36f69ce27a89580878507374a.dll
Resource
win10v2004-20220812-en
Target
19daa0234c02ec6df98a9e9b0bb1579df00c4fb36f69ce27a89580878507374a
Size
6KB
MD5
f8dc1ab0196fa8c8399b0e4f7ccfb3e0
SHA1
47aba58b5b045baf0bad45c4f971aa3699641cbf
SHA256
19daa0234c02ec6df98a9e9b0bb1579df00c4fb36f69ce27a89580878507374a
SHA512
5d46b968cf084e005e6c4a2b6b78e911c8956f93f1bd17b712f9b201c4f1115596679e8ac9354438f0b373381e8b7158f4e4ad324c6e5c6db5a65b03bc013366
SSDEEP
96:ZyHn3AYRLdwrFv4kQ9PcNI94cbNDY3CuoprzeQVtRISMg:ZMwYA94kiPUU2Su4JHM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetLevelAndItem
SetDIPSHook
SetMIRSHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ