g_bRunAll
g_bRunEx
g_bRunWl
g_hdModule
Static task
static1
Behavioral task
behavioral1
Sample
c002ae1b5cd1e203632df50ae0afef1dcc6be95340bf6a26bd3ccc0678128a82.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c002ae1b5cd1e203632df50ae0afef1dcc6be95340bf6a26bd3ccc0678128a82.dll
Resource
win10v2004-20221111-en
Target
c002ae1b5cd1e203632df50ae0afef1dcc6be95340bf6a26bd3ccc0678128a82
Size
43KB
MD5
550dbd16a8f56553084003c4c3860067
SHA1
b0e02b36214e3f66653faaa359c6549530489563
SHA256
c002ae1b5cd1e203632df50ae0afef1dcc6be95340bf6a26bd3ccc0678128a82
SHA512
7cd6c8e3219a03f684adc9809d7a31a9388ae31ca73fe791e0b41b4e446774195471953e02de2dad5197e9d67c47c8d7283df2cc70e0afb8e81372d4806d1a16
SSDEEP
768:KGIT3SftE2Yjg0kRl+ywg1C5kAntU6HO5lr0mNq1uC7FLL:QSftEjgl+yu+MvHO5mEq195/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
g_bRunAll
g_bRunEx
g_bRunWl
g_hdModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE