CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ac64e8c5517a77a11969e31bfe5cc85ca92e67884029936e4de0e90cfe402a45.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ac64e8c5517a77a11969e31bfe5cc85ca92e67884029936e4de0e90cfe402a45.dll
Resource
win10v2004-20220812-en
Target
ac64e8c5517a77a11969e31bfe5cc85ca92e67884029936e4de0e90cfe402a45
Size
80KB
MD5
65a542091135ed1ac819c797b988dd4a
SHA1
ee41b46ccad39581bbc56eda3097db3d3110065b
SHA256
ac64e8c5517a77a11969e31bfe5cc85ca92e67884029936e4de0e90cfe402a45
SHA512
05ac82ca8b45d2422e7c2d2d8401e2fc07b97845e7728164b2eea371b78363c00938e5a580b92e8fdf64e49e5c59fd9489054e35194512dd8b369029e7d02faa
SSDEEP
1536:yjJMzqRhEZLaWAm5n0UdT+1XBi2uWlujU1n/+4V+n+kN96A13HJhJ:ObEJaWj04yR/l9x2R+e6cHJr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ