CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f45829854def05c4402ca799a91c2ee40ebc11bd09c48a1beda0a1fb4d26cea3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f45829854def05c4402ca799a91c2ee40ebc11bd09c48a1beda0a1fb4d26cea3.dll
Resource
win10v2004-20220901-en
Target
f45829854def05c4402ca799a91c2ee40ebc11bd09c48a1beda0a1fb4d26cea3
Size
71KB
MD5
6af251f41cdef164638a263449ddedef
SHA1
aab7e8dedc9a09aaca6c9ab9ad3f28bc84915491
SHA256
f45829854def05c4402ca799a91c2ee40ebc11bd09c48a1beda0a1fb4d26cea3
SHA512
bfe0e00a5160ac03cc979dc70c6e198c8b73595a21cc37524401d1b3bdf925be1fc25a75f0aa8cf0192d0a1d8ca75be113312f6764c1397d44f129e44a558766
SSDEEP
1536:IykzkagDmJsIIMdmlhEk247nKcXr+zdJVdqii2i/Z:IFzkaVszMglW1i+g
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ