CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bf893fba8a5cab6ce2a3e49b96b84e545c0ad68074a4af3caed9e46c74f4f6d8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf893fba8a5cab6ce2a3e49b96b84e545c0ad68074a4af3caed9e46c74f4f6d8.dll
Resource
win10v2004-20220812-en
Target
bf893fba8a5cab6ce2a3e49b96b84e545c0ad68074a4af3caed9e46c74f4f6d8
Size
53KB
MD5
6f06fa68fc0294d16dd3cc715738ecd6
SHA1
cd790f7bb33eb42fd7f9e2b60ad9ee7d6018578c
SHA256
bf893fba8a5cab6ce2a3e49b96b84e545c0ad68074a4af3caed9e46c74f4f6d8
SHA512
276e3b86d85d0a54a248516f7faa0575483536e9573349f8227f075bfc4d45946bbe3a5389151873c6bc01fe59b8fc83dee4417a685140deb8034d37c80b7c70
SSDEEP
768:n2W5cWMGXUJO5TA9EZqhdbxciaF3uOIuYUUS0ZYD+IkJOB7pi8Ox3tAU74/:2ndGXtTUEZqhZxcixOIuXUcH5i5x3tFi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ