CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eaecd12e5566a3447d5d087f9b833cc23f1ab5672d58e14d13dc776a986c05ea.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eaecd12e5566a3447d5d087f9b833cc23f1ab5672d58e14d13dc776a986c05ea.dll
Resource
win10v2004-20220812-en
Target
eaecd12e5566a3447d5d087f9b833cc23f1ab5672d58e14d13dc776a986c05ea
Size
64KB
MD5
56c6b36027112705629a47e4b8f01ded
SHA1
0bafe04d1b970aa149852fa38295d8850a8fdfe5
SHA256
eaecd12e5566a3447d5d087f9b833cc23f1ab5672d58e14d13dc776a986c05ea
SHA512
0e9d791d2b8e477348553c1affb5df7bcb629ed9f2b01624a64268a18997700a90ba82d9c973e2dcb99aa69305541a69e363a245df65be52406a7796e8331591
SSDEEP
1536:x9AVRU28lwJWEcySErbCA8ooocfx2MAG/sJz8CRRbzVLzv:x9AV628yJWEcyJrGA9ooGzp/st8CRV5H
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ