CancelDll
LoadDll
Behavioral task
behavioral1
Sample
85bce13c85f707e66132d4f294c8fab1adecd0e2899eb0fb8fddb8c3d08764ca.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
85bce13c85f707e66132d4f294c8fab1adecd0e2899eb0fb8fddb8c3d08764ca.dll
Resource
win10v2004-20220812-en
Target
85bce13c85f707e66132d4f294c8fab1adecd0e2899eb0fb8fddb8c3d08764ca
Size
63KB
MD5
59972b15a31c86605b979aefc760edce
SHA1
bb62f11b2f3c1fa73e528e377db678f467696391
SHA256
85bce13c85f707e66132d4f294c8fab1adecd0e2899eb0fb8fddb8c3d08764ca
SHA512
c1e194149bfddee60589d8cd2d1214d059d4ab31f5bc8de3b42871907b71d1607b8c11a34e5e20c177de110b9d4f76dfb8e73586701e1103ef42fce1abd50110
SSDEEP
1536:jPeH2mgGC3HdB04Fpa4IBGM8Yuct4h9wl7WH9x:CHZ+84qXGqTtz7Cx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ