CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e952d05601ec00f4fd8a73e887ce5b220e1a166d65e833049d9b4e9bd5cce37c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e952d05601ec00f4fd8a73e887ce5b220e1a166d65e833049d9b4e9bd5cce37c.dll
Resource
win10v2004-20220812-en
Target
e952d05601ec00f4fd8a73e887ce5b220e1a166d65e833049d9b4e9bd5cce37c
Size
56KB
MD5
3f60c207c4d6e6c64640896f5b90d151
SHA1
2c54cd829bcbbf85ac12d567ac591fab0e054cf0
SHA256
e952d05601ec00f4fd8a73e887ce5b220e1a166d65e833049d9b4e9bd5cce37c
SHA512
e769f155e86ee3876f29f7ba07104c1ba06110a96031d282d8d891998a53c2805fa721b1ff0034446e008f32ad4f5154e3e3cd4fcdb6318538cb39489338c81d
SSDEEP
768:MbPCSzfg11x+/NfvVZasufsEYLzSog19zJidZVCmSXmKMAOnIkxVaJgV/2fCbxYK:PSb7vVZbosEr1905amKraIdJgN7qcN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ