@@Td@Finalize
@@Td@Initialize
@@Unit2@Finalize
@@Unit2@Initialize
_Form2
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
d217b610c47037ffc1a7c2d9d4e830afca14235f1d4a7f35d8fedff9fbfb9f25.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d217b610c47037ffc1a7c2d9d4e830afca14235f1d4a7f35d8fedff9fbfb9f25.dll
Resource
win10v2004-20220812-en
Target
d217b610c47037ffc1a7c2d9d4e830afca14235f1d4a7f35d8fedff9fbfb9f25
Size
240KB
MD5
5008f232a3669f2690db457ea6686758
SHA1
865e446f724952c55896ac8a6d2106eb9b91860b
SHA256
d217b610c47037ffc1a7c2d9d4e830afca14235f1d4a7f35d8fedff9fbfb9f25
SHA512
5553db4397974b0de08e485ed97c80588a7e1cbb4f8e4b2b45875003326f7f850ab9079df229fb690c3931d67c0946797d50ec5df3593cea29c2f0fee8a9a8e9
SSDEEP
6144:YD/Cv3vB0bcdAAFPgq684jU4j15Rt4v5304euu:YOZ0QDFYdzjUy15yO42
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@@Td@Finalize
@@Td@Initialize
@@Unit2@Finalize
@@Unit2@Initialize
_Form2
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE