CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6b5bf7eb973a61b69faf4113208e171d25a026e08059a1fd4ba9ad2937c9640d.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6b5bf7eb973a61b69faf4113208e171d25a026e08059a1fd4ba9ad2937c9640d.dll
Resource
win10v2004-20220812-en
Target
6b5bf7eb973a61b69faf4113208e171d25a026e08059a1fd4ba9ad2937c9640d
Size
70KB
MD5
54219a650e42413b0366e1f2eff7ab07
SHA1
4b40b4776638d08c84c5050ae08d60e464b311ef
SHA256
6b5bf7eb973a61b69faf4113208e171d25a026e08059a1fd4ba9ad2937c9640d
SHA512
e51ebfdbe0cc18385a947b36c3023758c43125e081df5d9184843bed160cf946ea4a7d8cbd2d51b013b2152ed18442dd8dced68593991b89722a2317780dda07
SSDEEP
1536:GEnkm5+WVF8HxP2kn05yQP2z1ihyRVqPlKg19vVPX3annE3aGxj2wE:GExfH2xP45yuGshMVqPlKSpV/yEaGpA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ