Get_MSN
Get_URL_Explorer
Get_URL_Firefox
xAvise_Desinstalacao
xAvise_Instalacao
xChange_User
xEnd
xInit
xShutdown
Static task
static1
Behavioral task
behavioral1
Sample
d4dd4648ebc1c34fb4040955da7f243f806b45d8d7768788616904b5f74309cf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4dd4648ebc1c34fb4040955da7f243f806b45d8d7768788616904b5f74309cf.dll
Resource
win10v2004-20220901-en
Target
d4dd4648ebc1c34fb4040955da7f243f806b45d8d7768788616904b5f74309cf
Size
302KB
MD5
9f84651d94acd0d76780a96c699a69dc
SHA1
13db5ecc80375fcd6bd9f799c8840905225fbe3a
SHA256
d4dd4648ebc1c34fb4040955da7f243f806b45d8d7768788616904b5f74309cf
SHA512
514ac239dd240d6563ab2bcbfa8295de59bcf35b8fa2630ff09a8c92cdc6900a1dd38566c476f8b138d1c8258e5e2fe023cb158f1ceff7d1d5570eea768bf479
SSDEEP
6144:v0JntrQwRDWro9e++eVjG4wSTAHvB4rAvoKGNx4axMiKw7yc:v0JlRDWroY++eM4juvB4ZKkbxTN7L
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Get_MSN
Get_URL_Explorer
Get_URL_Firefox
xAvise_Desinstalacao
xAvise_Instalacao
xChange_User
xEnd
xInit
xShutdown
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE