CancelDll
LoadDll
Behavioral task
behavioral1
Sample
de291e2b4e474294d09f599b31e8bb3b3f7b379e5b164b7b5fbbbdfa3a9a385e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de291e2b4e474294d09f599b31e8bb3b3f7b379e5b164b7b5fbbbdfa3a9a385e.dll
Resource
win10v2004-20220812-en
Target
de291e2b4e474294d09f599b31e8bb3b3f7b379e5b164b7b5fbbbdfa3a9a385e
Size
58KB
MD5
6ef32308b6be6dd82a9a476fc1c61351
SHA1
806c3afd179eb08a8cf3c1d1d5d09dfab160f043
SHA256
de291e2b4e474294d09f599b31e8bb3b3f7b379e5b164b7b5fbbbdfa3a9a385e
SHA512
59e5736d7db8b0329e34bbc5766ec28c29a5dc48cd9636a3ecdca76e3692c4e19f1fec7d5bf63d8d313ed8c51854cadd19a077e596edb246486d7f1b8ec32147
SSDEEP
1536:LUjkq7+jKA5BWGvy5CwA2aOzPSW1DNbYlpK:LUI6+jKA5B1vy5CwAwPSW1mpK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ