CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cb9de7cc7e6cbf83fc4f768543ace57b91cac682c99a602b357c29576719b20b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb9de7cc7e6cbf83fc4f768543ace57b91cac682c99a602b357c29576719b20b.dll
Resource
win10v2004-20220901-en
Target
cb9de7cc7e6cbf83fc4f768543ace57b91cac682c99a602b357c29576719b20b
Size
67KB
MD5
4d16e05a1726a88d4fa54a1498d23c68
SHA1
d989db975b869d08850fed582476f8316a3c1993
SHA256
cb9de7cc7e6cbf83fc4f768543ace57b91cac682c99a602b357c29576719b20b
SHA512
25a3a38744581e726e805abe54bcd95556a583dc8273f71d7168089ac07c0d7a144c96d569e2fdc4231e66bb62a9db8aaa34dc20420e70888ce2bf0b1b8d8838
SSDEEP
1536:bJT7qciEXnB49tbFop8od8JW1wFlqn3XsvEfUZykuI8sfkoHL+Ji6jW6:bh+ciEXBPvJml1MMZykXlfhH4i6jW6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ