ServiceMain
ResetLMHK
Static task
static1
Behavioral task
behavioral1
Sample
a4782c8fd30d475c0053839364c07086e31f97d0dc492cbd8d8a74a22cdd523a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a4782c8fd30d475c0053839364c07086e31f97d0dc492cbd8d8a74a22cdd523a.dll
Resource
win10v2004-20220812-en
Target
a4782c8fd30d475c0053839364c07086e31f97d0dc492cbd8d8a74a22cdd523a
Size
94KB
MD5
72767cb1bdcde69ea11cb5f8bece11b7
SHA1
69e606ad9b1399d6683023f62c9a0d0291a72838
SHA256
a4782c8fd30d475c0053839364c07086e31f97d0dc492cbd8d8a74a22cdd523a
SHA512
bd8582df42a2ba3b9aaeba8eed1a027e63b62deff0b7ad3ec09edaf29a56fd1e42bc8b33c0a39f489eedcb15bfcc174170f0a1b66ecbbfb19d611ca87715a395
SSDEEP
768:tRhyioiBhFvXzxNGqyJTEVME4YvjBBsMHJZZ40HUazQXS46HC1:tRhmiBhFvjxWVY/46jBGMHHPHvzKT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ServiceMain
ResetLMHK
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE