ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
Behavioral task
behavioral1
Sample
c67cbb0034dd9c5859546cf61253b30627265bca78afccc194629c801b84155d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c67cbb0034dd9c5859546cf61253b30627265bca78afccc194629c801b84155d.dll
Resource
win10v2004-20220812-en
Target
c67cbb0034dd9c5859546cf61253b30627265bca78afccc194629c801b84155d
Size
330KB
MD5
315a9306b0b62ffb5f90110587f3aacf
SHA1
e7efa06f046660d8376e7276770af3e82138d9a2
SHA256
c67cbb0034dd9c5859546cf61253b30627265bca78afccc194629c801b84155d
SHA512
1f6e484ab952bfb76f061df3d0b63c90f8dd5c3a6e4298825bcb75df1de561eed0899a61cda96a7c8c905de1288dbf7753dcb34a5bd70a535bc4e72b342109b5
SSDEEP
6144:EFBejAZVcn/54b2IZOM3NMCFpgpTp0JBCdE2SqN+oSnP:cBq/GJOMGcG9N+oS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE