RunDllHostCallBack
asm_�������ڴ�
asm_���ֽڼ��ڴ�
asm_д�����ڴ�
����
����
ȡ��������
Static task
static1
Behavioral task
behavioral1
Sample
b8e1c7dd01abbc0b254942f8dc9e59808d4e4576098a3f36a42ce7d8b2d43b9f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b8e1c7dd01abbc0b254942f8dc9e59808d4e4576098a3f36a42ce7d8b2d43b9f.dll
Resource
win10v2004-20220901-en
Target
b8e1c7dd01abbc0b254942f8dc9e59808d4e4576098a3f36a42ce7d8b2d43b9f
Size
621KB
MD5
db1b39f3e71d19e87418c6d086ff7b0e
SHA1
71549469eb119ae5187ee5563d3d45baf1f5256f
SHA256
b8e1c7dd01abbc0b254942f8dc9e59808d4e4576098a3f36a42ce7d8b2d43b9f
SHA512
6ae7c15b8fdc178111a68ef354ba2cea5121d72908504b54a1e26220852a10fb1f3600bea7546ff2cd80380066d1b64a8eea13415ccb4b477c1049a622313866
SSDEEP
12288:zcze/iPMFz87TWf/pL1bpFgwM0WI79Vl0+42fVetx:Qe/iEFziu7Hndl342Ytx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
MessageBoxA
RunDllHostCallBack
asm_�������ڴ�
asm_���ֽڼ��ڴ�
asm_д�����ڴ�
����
����
ȡ��������
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE