DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
Behavioral task
behavioral1
Sample
9046265742b6c7f762550b026131b2cd9508897e9161a59f03b0de792b419c3b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9046265742b6c7f762550b026131b2cd9508897e9161a59f03b0de792b419c3b.dll
Resource
win10v2004-20220812-en
Target
9046265742b6c7f762550b026131b2cd9508897e9161a59f03b0de792b419c3b
Size
21KB
MD5
6f3e82ed3aa1f320ce7831ad5cabdb6b
SHA1
986e6b65bfd3765932da2726ab59ed2fbd8c7037
SHA256
9046265742b6c7f762550b026131b2cd9508897e9161a59f03b0de792b419c3b
SHA512
0f097e12d820223d7a0e119645eecd9bfaa93f747485970176a440bf5c07a5434b4cba5bb77c879434bbd1361798ef68b11739af6edd85e256ec99de5fdd9545
SSDEEP
384:aSdOKYRoZKkQaNWyVTNLFZA8kYJiuoiGWvO/READ/mOq6DAM:gxKZK98TNZl4vq2pC5A9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DivxDecode
Hookoff
Hookon
InitializeDivxDecoder
SetOutputFormat
UnInitializeDivxDecoder
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ