CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0f45e88c341b5ed2b15f9028e543cda28d52dcffb2e69eab3059f6f33def757f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f45e88c341b5ed2b15f9028e543cda28d52dcffb2e69eab3059f6f33def757f.dll
Resource
win10v2004-20220812-en
Target
0f45e88c341b5ed2b15f9028e543cda28d52dcffb2e69eab3059f6f33def757f
Size
83KB
MD5
66b9ab64b98d3be23e3acf761960bd2f
SHA1
9aed454e1152e07ab2af3a106c34e83651872aa3
SHA256
0f45e88c341b5ed2b15f9028e543cda28d52dcffb2e69eab3059f6f33def757f
SHA512
b2aa1579ca3f23e6d724b9dae0bf0b3e50eb00252561d95338482a40c5d020d01cb596de0de6806bd0c1b7621f34d26cbb67ba9e4ba6f769b97f57f6b8ec63c0
SSDEEP
1536:IykzkagBQ8FYg+oQxFRKyNoC84KTxyEkXQNzc:IFzkaSXYrnF7uCz+xypXQhc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ