KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
modmCallback
Behavioral task
behavioral1
Sample
dd4945408705ed68ffe97c3c059eea812ccd45c23d7f5d8cae991798748a3138.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dd4945408705ed68ffe97c3c059eea812ccd45c23d7f5d8cae991798748a3138.dll
Resource
win10v2004-20220812-en
Target
dd4945408705ed68ffe97c3c059eea812ccd45c23d7f5d8cae991798748a3138
Size
9KB
MD5
aa02cbd66f9c12075fc83d83763fe38a
SHA1
f731523214d0cb48d122207a7f17d89f3961edad
SHA256
dd4945408705ed68ffe97c3c059eea812ccd45c23d7f5d8cae991798748a3138
SHA512
b0f388bc96e75ce8606813d961cb66b1e193bd6c3d4cb1172ac0619125b6fd5469d8015f5d6d62c8a61a7dda6d184655bed326e6f9652c632e1e6ce4be6d7168
SSDEEP
192:/hHlomwviVQa8zEsYDvca1Wsd6MW0Th+5bfWgl:/w5RaM5YLcZsd9W0M5fT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
modmCallback
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ