DriverProc
init
modMessage
modmCallback
Behavioral task
behavioral1
Sample
b6b49a074769ca187cbd0b4f292a158ad00318b54b13bcc5ddc14c5b7899bfcf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6b49a074769ca187cbd0b4f292a158ad00318b54b13bcc5ddc14c5b7899bfcf.dll
Resource
win10v2004-20221111-en
Target
b6b49a074769ca187cbd0b4f292a158ad00318b54b13bcc5ddc14c5b7899bfcf
Size
14KB
MD5
8d2e6fe13069c2dc7784b645615bba63
SHA1
158056bf283da28dd041a5b4014747cdf2b2c757
SHA256
b6b49a074769ca187cbd0b4f292a158ad00318b54b13bcc5ddc14c5b7899bfcf
SHA512
8d854ba69213fc5389bcda84c7c7e043bffc66650e9a2c21b16974988e1efe8dc39ff5b4f1faf9e850381c3b333f1e14f44756d670d851acbe70d59ff077c14a
SSDEEP
384:Aa0uEGF+wBm0n+2SP1GccradiLmag6PHPGsy6/WAaK:A8R+wg0n4PrYaELmV4ny6b1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DriverProc
init
modMessage
modmCallback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ