CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7a9a3ab8c7748bf5913d87e37b461910928f8ec639e8216184e34bf59683854b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7a9a3ab8c7748bf5913d87e37b461910928f8ec639e8216184e34bf59683854b.dll
Resource
win10v2004-20220901-en
Target
7a9a3ab8c7748bf5913d87e37b461910928f8ec639e8216184e34bf59683854b
Size
51KB
MD5
45993dc7bcd1a6805f59c0abe522ac18
SHA1
132d2717929637fb831f4affc9d4097340c584e8
SHA256
7a9a3ab8c7748bf5913d87e37b461910928f8ec639e8216184e34bf59683854b
SHA512
12654298cb43d6726d4288558527f2be5ed4be34ce653d26ac37fc5f0355d17b2a00df91df17209ce9e580f4e2f672285cc82e0b9b1c90c1a994a7b35aba0a19
SSDEEP
1536:Y5V54qC4VaLxmPvQo/yOWr/Ieu9E/nyPTrH:2AL8aLxmUrAeud
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ