CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bf4f6ac8527b5054a2c756a0a76f9daccf3b38fcca11b70ba63c3d450767389e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf4f6ac8527b5054a2c756a0a76f9daccf3b38fcca11b70ba63c3d450767389e.dll
Resource
win10v2004-20220812-en
Target
bf4f6ac8527b5054a2c756a0a76f9daccf3b38fcca11b70ba63c3d450767389e
Size
62KB
MD5
6448345ed5ac93e80d8826c94c2bc6c7
SHA1
32f4141827a7d6e2fa547c61e011b183a88ce22b
SHA256
bf4f6ac8527b5054a2c756a0a76f9daccf3b38fcca11b70ba63c3d450767389e
SHA512
e4ef67444f09b451bb3927c66c5209104026d4491ddec099cf1b782d8c321c49c1c032e8f91077e882247ec64f4946e5a4d8d9e4f39638c88508a68639acad9f
SSDEEP
1536:75ZXMityech90ly6/x1J1haLR3iexOw3khdmpZjnW:9ZLnch9x6fJEc0OFcpZzW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ