CancelDll
LoadDll
Behavioral task
behavioral1
Sample
79d17249ac053c147bca17e5b47d8bd0ff8fdc9df89d1e76430234a2817b8cad.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
79d17249ac053c147bca17e5b47d8bd0ff8fdc9df89d1e76430234a2817b8cad.dll
Resource
win10v2004-20220812-en
Target
79d17249ac053c147bca17e5b47d8bd0ff8fdc9df89d1e76430234a2817b8cad
Size
68KB
MD5
5d78e1b9f5868e7eb8252ca4ca26c1d0
SHA1
a4238d0d3fe93266257c951ecee9666ddd0c5cf5
SHA256
79d17249ac053c147bca17e5b47d8bd0ff8fdc9df89d1e76430234a2817b8cad
SHA512
b6198b4b4c60d3f11610911f1f5a0011ea75382d6e789ae8fb16082e470682a627ac1315f25a623556f0f6db2c558741c61b60ad1061c733cb6d0b7e4402ec0a
SSDEEP
1536:LkywK9VtltUnTcN/QoCi4lElSKqyw+n8m/En83r:iwVjCnTcN/KGclM/n
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ