KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Behavioral task
behavioral1
Sample
a32d32451f47c227ffcf72eb58051157399c0fab14b0c9aaa615585dfca5699b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a32d32451f47c227ffcf72eb58051157399c0fab14b0c9aaa615585dfca5699b.dll
Resource
win10v2004-20220901-en
Target
a32d32451f47c227ffcf72eb58051157399c0fab14b0c9aaa615585dfca5699b
Size
7KB
MD5
a836d21c2e5614839e2cc797ba50ab16
SHA1
ecf73fc3e5f78234ec561c7d8eeb4ef6c6719c79
SHA256
a32d32451f47c227ffcf72eb58051157399c0fab14b0c9aaa615585dfca5699b
SHA512
682ba46d351fd7d53cf05e462664f12b4a3805a60ff66f8733bdc012d5c64ac8a9bec16c7a79fe73c0b76665678cde4c4f00bc84ba9b5e2eb4b9b0677727b118
SSDEEP
96:LNx5ws3Mn2lk5ieB3jc5WQF0Cohq9OjiFJ+VSWa3wRL75m:lw72lk5ZEBdCCWa3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ