CancelDll
LoadDll
Behavioral task
behavioral1
Sample
00564242df2e75f40da9d7d23bd0dbabf0070a9c21e962aa207a7da1cf2e92db.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
00564242df2e75f40da9d7d23bd0dbabf0070a9c21e962aa207a7da1cf2e92db.dll
Resource
win10v2004-20220812-en
Target
00564242df2e75f40da9d7d23bd0dbabf0070a9c21e962aa207a7da1cf2e92db
Size
84KB
MD5
654561f0cd9558bad9b00f24e1736a41
SHA1
ced5601fc81e1b813bf58ac94497d4ee59441b24
SHA256
00564242df2e75f40da9d7d23bd0dbabf0070a9c21e962aa207a7da1cf2e92db
SHA512
465113f9a7fffc1ad5a7d805c30907391d7e8be89522afb3a29f39d7111bdb8c1b0a1c13a41527e7f2e6dffd5383f5e41ddfbea94d39b31334e61aed090e2d0d
SSDEEP
1536:V7LV29Z+qX+qm02UZjyKZfMQoMaFKB7my1s6fOe930f1atnSiySCcXg:FU9Z+7ar+cMf3KB7mgsip0NuSiy6Xg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ