DLL_BUILD
DLL_CLEAN
DLL_DAT
DLL_DAT_EXCLUDE
DLL_ID
DLL_INIT
Static task
static1
Behavioral task
behavioral1
Sample
9fbed29ca79a771127dbb5a5eafbb104d61fb48b136db12f7b4dd69c25bc3010.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9fbed29ca79a771127dbb5a5eafbb104d61fb48b136db12f7b4dd69c25bc3010.dll
Resource
win10v2004-20220812-en
Target
9fbed29ca79a771127dbb5a5eafbb104d61fb48b136db12f7b4dd69c25bc3010
Size
139KB
MD5
feed931d86d08b21d1e260f4ef49ac24
SHA1
ab6e9a6694376fd9b3148a5391c2e6ffd53e4e87
SHA256
9fbed29ca79a771127dbb5a5eafbb104d61fb48b136db12f7b4dd69c25bc3010
SHA512
3c53ea1250201f5acec4d27f70af97818c8c1acb0a1e5b3b1890b9e344f122b7a6736b7b3cc8dead382deff4bca9506a3b0dd7acb596565f72798e85c596f344
SSDEEP
3072:4yQBUZwNZoRqXnG51D2bnNg5Po/staZCwbZJrxkiddR3B2:9QUZwmAnWeY2/DFkMx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DLL_BUILD
DLL_CLEAN
DLL_DAT
DLL_DAT_EXCLUDE
DLL_ID
DLL_INIT
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE