CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b4ec67346e6b45114a3897c446eb6c2f27a25d3b9d7a2b60cf357047c0cc6125.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b4ec67346e6b45114a3897c446eb6c2f27a25d3b9d7a2b60cf357047c0cc6125.dll
Resource
win10v2004-20220812-en
Target
b4ec67346e6b45114a3897c446eb6c2f27a25d3b9d7a2b60cf357047c0cc6125
Size
58KB
MD5
418c3edeffb20a4faee28c2160550cd5
SHA1
93721e56e86d2d44a2b3b6b01b0a15e429eabb64
SHA256
b4ec67346e6b45114a3897c446eb6c2f27a25d3b9d7a2b60cf357047c0cc6125
SHA512
c764e9901f679209b6e4686931c890940b9370e0b33fdde2eceee2487380a6cdd62eb918059c5d9495766c266fb15cdcf503c0ab607365173ce7ab07b729296d
SSDEEP
1536:6zKJ2qrTbS1cEI+bcHH3IEduj0QsnHkA2zAUto:YqDSqEIIMYEduj0NHkA2zLo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ