CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9ee18070fa4a19a05caa5a5915631df6ca8231d5f65d392241d7db5ba28ad8b5.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9ee18070fa4a19a05caa5a5915631df6ca8231d5f65d392241d7db5ba28ad8b5.dll
Resource
win10v2004-20220812-en
Target
9ee18070fa4a19a05caa5a5915631df6ca8231d5f65d392241d7db5ba28ad8b5
Size
69KB
MD5
0a4f8bfe94cbf05c78dc6e06764e391e
SHA1
b5801f7dfa7c903a51f7664820521c8b6903773e
SHA256
9ee18070fa4a19a05caa5a5915631df6ca8231d5f65d392241d7db5ba28ad8b5
SHA512
5b9dac2185661fd370c79b368df9c9124f48010ff240f4ddfccda2b8d9f9e288dea06c99f8d443374f9b0f5595933be8b13cba02218b267fcdfc4098f12e6cb8
SSDEEP
1536:VOzB/iUum2q+bTzv20FunnnbRTMr9ircriJGP/Qfw0ntCFAnf1eB9HcGxvWcV3vj:VK/iXq+Xv6nnbWZycriJIkw0ntCFkoBx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ