CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eb46a6161d97122ec65a0d67f48f80429d9d109e5d399beacf09d3a70f245fab.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb46a6161d97122ec65a0d67f48f80429d9d109e5d399beacf09d3a70f245fab.dll
Resource
win10v2004-20220812-en
Target
eb46a6161d97122ec65a0d67f48f80429d9d109e5d399beacf09d3a70f245fab
Size
67KB
MD5
58c599a95d80d395233b704c3f1f10f9
SHA1
ac7ebbff541dc6f03723d4589ab6f94311889b3b
SHA256
eb46a6161d97122ec65a0d67f48f80429d9d109e5d399beacf09d3a70f245fab
SHA512
490b6482c58985e15c8ddaa21744a09777d4cb40acb75eb6d2491a0aa165b6e30a9ff3d4c2ea7b216ad1fd7b8e6cb1979a78fd0ec80571f6070944bf80e36b7b
SSDEEP
768:IykIwePd8g7dHlIodS7sKQ1nb2r9K2QfYMlJI1g1jKoQqmz62xliDNomXhzscPpg:Iykzkag3D9txCr9K2QfL1mRmBoviMY5U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ