CancelDll
LoadDll
Behavioral task
behavioral1
Sample
56907ce50f0c57dbe4bd65e33be6974bb1988823689a862f2aa4af426b48840d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56907ce50f0c57dbe4bd65e33be6974bb1988823689a862f2aa4af426b48840d.dll
Resource
win10v2004-20220812-en
Target
56907ce50f0c57dbe4bd65e33be6974bb1988823689a862f2aa4af426b48840d
Size
71KB
MD5
552cf48466ab58ef7b033e2d51eaa303
SHA1
cb7baef4ae3090c73a0065c100f165a6aea03d09
SHA256
56907ce50f0c57dbe4bd65e33be6974bb1988823689a862f2aa4af426b48840d
SHA512
81dc6adca0187be660299d4c8f7a93fba86f01a067e05bbfe0770bcd1737a72e3271b41cc7d3a504564d65b71d2ad7f1357547d333889e2bdc56663b67a3f97b
SSDEEP
1536:68C3PjhLO0GWv91kVRhszq39veQigZv7nemgk2o08O0s8m:68APjeWv9WVHC6znC7UOx8m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ