CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cab542854cc54796109b98a31407dd4b8b4b2d14f8c88e7714cea32b07ad779d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cab542854cc54796109b98a31407dd4b8b4b2d14f8c88e7714cea32b07ad779d.dll
Resource
win10v2004-20220812-en
Target
cab542854cc54796109b98a31407dd4b8b4b2d14f8c88e7714cea32b07ad779d
Size
72KB
MD5
7132ad6c35ba0bee1204fded16884f1a
SHA1
d04158396e8ea1f89566e731e8e426aa6cef69b1
SHA256
cab542854cc54796109b98a31407dd4b8b4b2d14f8c88e7714cea32b07ad779d
SHA512
0c7dcf3190d3d8cfef119db8c6f637f23d90f6614582282db7838f814d4ad2c9695f3fc416b1516e3b7c4e1811412194ecfade3bd3a62cbb201e8d382b678877
SSDEEP
1536:58mg/tzoHsCRU/awTbaJunhG9JT2l1OzGtG4kqDPc4ocRQXhKKXTH:eHoHsxnKtCgIGhqrlocqz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ