CancelDll
LoadDll
Behavioral task
behavioral1
Sample
532bf14a1b9c3ab65e0f4f339ca44435c93269d3d95027053a912860962107b4.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
532bf14a1b9c3ab65e0f4f339ca44435c93269d3d95027053a912860962107b4.dll
Resource
win10v2004-20220812-en
Target
532bf14a1b9c3ab65e0f4f339ca44435c93269d3d95027053a912860962107b4
Size
59KB
MD5
4f6205801eb18925bed9109fac783659
SHA1
601c1f067156b15d8498c9190434a50c6c474ec3
SHA256
532bf14a1b9c3ab65e0f4f339ca44435c93269d3d95027053a912860962107b4
SHA512
c03795484b90bfa2c75a6edac0f999422b4c8ffde3f73accd825b96441ff698d43f12bfda29690bcbcbd5a8a6f9483485c2c29f36957c5d807c73d05f484bbdf
SSDEEP
1536:68C3PjhLOqfCn97ayTSP8v7+A59MFCWQYNcIS/:68APjXy7ayTu8f59mAY+5/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ