CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bda4a1724d1635f2f978f4128d2723703e3c63bc2d48b2602a1fcde0ae57f839.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bda4a1724d1635f2f978f4128d2723703e3c63bc2d48b2602a1fcde0ae57f839.dll
Resource
win10v2004-20220812-en
Target
bda4a1724d1635f2f978f4128d2723703e3c63bc2d48b2602a1fcde0ae57f839
Size
59KB
MD5
62b6be62b426c86d13f5f24f2c1e4439
SHA1
dd1b3d5a2fa0e4b200d9072a8f35fc6220a52368
SHA256
bda4a1724d1635f2f978f4128d2723703e3c63bc2d48b2602a1fcde0ae57f839
SHA512
5bb871f6858a296d08dd07ddc808e2a10b3d775be9ebe555105cdcd54c20672af66f5ff6851d1859d56bda1db6341cf15cfd139acacbea0ae5a8f2b5645d60f8
SSDEEP
1536:yok0mU998FjOJ8SeXFQRg2T7ZGLaIVCVp+:/ma8bj6ziS+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ