CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ad7bc4d6e47754bbc939090a95dfb3a2656df8c1c9527a52519a0af2a4026ca8.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ad7bc4d6e47754bbc939090a95dfb3a2656df8c1c9527a52519a0af2a4026ca8.dll
Resource
win10v2004-20220812-en
Target
ad7bc4d6e47754bbc939090a95dfb3a2656df8c1c9527a52519a0af2a4026ca8
Size
62KB
MD5
617115240d23afc2093240dc0029d258
SHA1
2b8b2c6b81fca573f6afc8098f03e184e8c0702b
SHA256
ad7bc4d6e47754bbc939090a95dfb3a2656df8c1c9527a52519a0af2a4026ca8
SHA512
6b99d85b77829a0b00dbc56db9214d9a2f7c57599a66da357ab6ad4329f824f2b16c08543eaa48b5055b202f56b9e885a3ab2248d767b4232744d53ea8fb0d61
SSDEEP
1536:yjJMzqRhEZLaWuD2GavsI4OevKkbYw8XBGWt/:ObEJaW42GavsI4AyYPBtt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ