CancelDll
LoadDll
Behavioral task
behavioral1
Sample
45e8b290e198c349d9b60f7c3592300f166001daad9ea9acd628c97f3b8fb0a6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45e8b290e198c349d9b60f7c3592300f166001daad9ea9acd628c97f3b8fb0a6.dll
Resource
win10v2004-20220812-en
Target
45e8b290e198c349d9b60f7c3592300f166001daad9ea9acd628c97f3b8fb0a6
Size
71KB
MD5
6155b69e625b987b1a24da85cd7e4f5b
SHA1
869ad491c2ba0b3b5b108f01ccb9201e97b3831a
SHA256
45e8b290e198c349d9b60f7c3592300f166001daad9ea9acd628c97f3b8fb0a6
SHA512
3a40911e47ab6684425b05e5d9a9eabb5258fe303aba701110b33688e73ea3debfe2da8e2ee059c6de2446187127a9d5704ea1eea54a04bd4d9d6564e31fc3e9
SSDEEP
1536:VOzB/iUfZDhgq0vSxooSa0VYEnMl0iQ5nQ7C0kPxR9PTM96ObD:VK/i+D0vSxoc0KEq09pkAJnP49rD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ