CancelDll
LoadDll
Behavioral task
behavioral1
Sample
10dc97a36e70e4a7b43d6d3445f4349cb58d5cde13aa0d0325eb78b4e18215c8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
10dc97a36e70e4a7b43d6d3445f4349cb58d5cde13aa0d0325eb78b4e18215c8.dll
Resource
win10v2004-20220812-en
Target
10dc97a36e70e4a7b43d6d3445f4349cb58d5cde13aa0d0325eb78b4e18215c8
Size
64KB
MD5
6460f1d534e8c02682b6b5be4d9ae24b
SHA1
8bb1aaf354b89860a3dd9c5bacb87e43cb1fc653
SHA256
10dc97a36e70e4a7b43d6d3445f4349cb58d5cde13aa0d0325eb78b4e18215c8
SHA512
eae5e0c48dcbc9296777dcaba09b613e3ff192ad2b6f1c03996c704eba5e5f318ed4f07847985bc3d0757e6db85323bbde9463af4400dc2d943482a2596305aa
SSDEEP
1536:6RTVrvWY68qHzsvlgnZBdOm5H4ccHfaLrIAgbwibxJ:6rC8U2cZBJlzUASHxJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ