CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5f10983b33ea27676316b9a19c3d8b18ef1b1184dcb41b386248da700189e9c8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f10983b33ea27676316b9a19c3d8b18ef1b1184dcb41b386248da700189e9c8.dll
Resource
win10v2004-20220812-en
Target
5f10983b33ea27676316b9a19c3d8b18ef1b1184dcb41b386248da700189e9c8
Size
61KB
MD5
d960a1ee4018dfce1538fa41dc258836
SHA1
3d5d17795bee6303cbb52dd57ae54b44c134dee1
SHA256
5f10983b33ea27676316b9a19c3d8b18ef1b1184dcb41b386248da700189e9c8
SHA512
e54ea6dec891eb1439767ff0e2524525642dab5b34b0975557cf1dc1dc8a211fd99eb5006a60fbe368eba5cbcf7e9252db0b3b5f15a6830e97b93fe1be8c3032
SSDEEP
1536:GEnkm5+WVF8HxP2gRkdchSelunnmHnaqKm5+fapdd:GExfH2xP3kuhWaFK8+Cd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ