GetCommand
GetCommandCount
GetFormatVersion
GetPluginDescription
Behavioral task
behavioral1
Sample
cd6710844d3051b888e0353e36861e88c721a2075c8089a44ff1691b48c672e1.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cd6710844d3051b888e0353e36861e88c721a2075c8089a44ff1691b48c672e1.dll
Resource
win10v2004-20220901-en
Target
cd6710844d3051b888e0353e36861e88c721a2075c8089a44ff1691b48c672e1
Size
16KB
MD5
401f134a132d9dcc286ccc4b32790598
SHA1
4a144db77caedca32c5a07b9e5e08c6801fecacc
SHA256
cd6710844d3051b888e0353e36861e88c721a2075c8089a44ff1691b48c672e1
SHA512
37e8a08d59c8278eaf2b865c584e2384eca57af43a0622f58e04905a2e043adf6b4bf3954c61145d0309c48ca42c54ef443273f00ddc4fc641899190911e1ca5
SSDEEP
384:wfvqBy3JZErrEX3f8oU5FbGV6cwAILnVtHnzYd:qyeorr4UoU5FiV6clILn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCommand
GetCommandCount
GetFormatVersion
GetPluginDescription
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE