CancelDll
LoadDll
Behavioral task
behavioral1
Sample
654b4fbd52a7713b9ed9a063faefb4f120eaeafd170d0bffa8a9c8e2e1f15b56.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
654b4fbd52a7713b9ed9a063faefb4f120eaeafd170d0bffa8a9c8e2e1f15b56.dll
Resource
win10v2004-20220812-en
Target
654b4fbd52a7713b9ed9a063faefb4f120eaeafd170d0bffa8a9c8e2e1f15b56
Size
70KB
MD5
52e13dc34d2d5ed0231ea30796d73540
SHA1
3f094a343384aa192e96f71ee0f04219aed4e391
SHA256
654b4fbd52a7713b9ed9a063faefb4f120eaeafd170d0bffa8a9c8e2e1f15b56
SHA512
798e79447f034937d4f199b375224196e24bba45939963b5fa720933f184c0d366c023f697f8e6720b2e97eb1bb1f14b75d59efabdd5d087b15472da2bbc2359
SSDEEP
1536:GEnkm5+WVF8HxP2NieVfAiaaFyhhb61GXcTAGemQWmU71MB5:GExfH2xPzeV4iaaFy/61GkAGl7W7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ