Get_MSN
Get_URL_Explorer
Get_URL_Firefox
xAvise_Desinstalacao
xChange_User
xEnd
xInit
xShutdown
Static task
static1
Behavioral task
behavioral1
Sample
a4280ebd4b3ad06a9498eb906f5fea3ed4f944180a62d6b2d733ecdf121334f4.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a4280ebd4b3ad06a9498eb906f5fea3ed4f944180a62d6b2d733ecdf121334f4.dll
Resource
win10v2004-20220812-en
Target
a4280ebd4b3ad06a9498eb906f5fea3ed4f944180a62d6b2d733ecdf121334f4
Size
309KB
MD5
a6498b863f7742c4a548e94636fbcd4b
SHA1
1183d52c290c03c74cbcbb1f313f13caba042a8a
SHA256
a4280ebd4b3ad06a9498eb906f5fea3ed4f944180a62d6b2d733ecdf121334f4
SHA512
ec44b27af74e511a505085c11a6e554ff57c2c11fec4306bc47fb2ae7ed862cee4e22b2e3ea87c30517bac3b61709ced022791b7206a6050f66d5c5c681ca276
SSDEEP
6144:PzVunbj0mCtYw6HdDZovdP19xjAl1iU07zm6FA5c4m0ezJ6S13sEMeOah6:LVuf0m26iBtA1iZu6a5c4mPzQS13RDO7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Get_MSN
Get_URL_Explorer
Get_URL_Firefox
xAvise_Desinstalacao
xChange_User
xEnd
xInit
xShutdown
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE