CreateCnntView
FreeCnntView
ȡ����ϵͳ����_����
Behavioral task
behavioral1
Sample
ad4a81bb9f8e185f45030043bcf541869f558c3e56875ccf96fa7c5500c2a01b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad4a81bb9f8e185f45030043bcf541869f558c3e56875ccf96fa7c5500c2a01b.dll
Resource
win10v2004-20221111-en
Target
ad4a81bb9f8e185f45030043bcf541869f558c3e56875ccf96fa7c5500c2a01b
Size
8KB
MD5
67294dc4e5b1e2fd2188500eefaf540c
SHA1
c83b4b3c743186cc2dcd067629a41e452cde493e
SHA256
ad4a81bb9f8e185f45030043bcf541869f558c3e56875ccf96fa7c5500c2a01b
SHA512
9c24f3a163dfbf0a2f75da24d10bcf5349cc6111a997e4ab9e0714e75324c5cbd33a7ec6fe9ac8fadc605c2469304672c962231f22f94bb43c23515b500389e4
SSDEEP
96:CM66Fv99cFQAUkesKJJ8h0xeDDcv3pfyfkgubhULTPl0su2Wk:CV6FzcRbeg0xOAv3pqfcy90V3k
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateCnntView
FreeCnntView
ȡ����ϵͳ����_����
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ