CancelDll
LoadDll
Behavioral task
behavioral1
Sample
12a9f20a411d2093266c9d7d8f94683e3e0c1b5887aec3fd413d3b59cf60538a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12a9f20a411d2093266c9d7d8f94683e3e0c1b5887aec3fd413d3b59cf60538a.dll
Resource
win10v2004-20220812-en
Target
12a9f20a411d2093266c9d7d8f94683e3e0c1b5887aec3fd413d3b59cf60538a
Size
48KB
MD5
6d8f8f038af79e639641d287b52425e5
SHA1
676d9874a9ebb1217afc89d68bf10658c2c0645e
SHA256
12a9f20a411d2093266c9d7d8f94683e3e0c1b5887aec3fd413d3b59cf60538a
SHA512
07a054473581d00785e0e569a3244fcecf43647bd8225813adc398f53d74f54a437b1acab63c270d651b20dd60bda9324dd5454f3ed7ec88af79b28208f58fcf
SSDEEP
768:U7bYsdWVmVE4U3M/aCZOpR38lRT5QZER44mCMN7Dre8AmyOT/aTm9z:UomGmuxCZ+h8l7Qo4PTG8Rw6z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ