Install
SendMessage
StartDevice
StartHook
StopHook
Uninstall
Behavioral task
behavioral1
Sample
c9c2cff28117ab3dc4f222b3d58633379db7b1fde61c48d8e8169fb8fb938f0d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c9c2cff28117ab3dc4f222b3d58633379db7b1fde61c48d8e8169fb8fb938f0d.dll
Resource
win10v2004-20220812-en
Target
c9c2cff28117ab3dc4f222b3d58633379db7b1fde61c48d8e8169fb8fb938f0d
Size
358KB
MD5
1b1771c2db3281a067b2556b1810a533
SHA1
0ed2232a92e2fb53239b76256535806e198f7f2c
SHA256
c9c2cff28117ab3dc4f222b3d58633379db7b1fde61c48d8e8169fb8fb938f0d
SHA512
52ef5d027732283629de87bef1c949e5c0e935e5bced94eab8c25df9b057379b9e85cd5e520c09ef487cb400e8f2eabbace1ad1617038c7c8a7dcc61c61f5050
SSDEEP
6144:4ZULHzp+uUeWbLAAJ1af0gM3iOj3MRh/Emy38Im/oVbzAooPkNxIysTWcGkEGoSF:4WLThWbLAQa8gM3iOANEmQ8IJfo8Nmy6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Install
SendMessage
StartDevice
StartHook
StopHook
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE