CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1392c75f8b0f9118a1e226fc2b9abf4e07f4c68f0269972f816ff7a9ba7d0652.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1392c75f8b0f9118a1e226fc2b9abf4e07f4c68f0269972f816ff7a9ba7d0652.dll
Resource
win10v2004-20220812-en
Target
1392c75f8b0f9118a1e226fc2b9abf4e07f4c68f0269972f816ff7a9ba7d0652
Size
60KB
MD5
41dc11cd7cd436e750a5751a38b0ac50
SHA1
15409a6b2718af1da87651656fd648d2c5b1d6a7
SHA256
1392c75f8b0f9118a1e226fc2b9abf4e07f4c68f0269972f816ff7a9ba7d0652
SHA512
c5bcb6209f3a54b832670943f02f93027977bb5ddfe14cfc7aed99c96befc0ca5d45329886ed5ebe46710b296626f825f01393f2d18038d0bfdb7869bf9b0f2e
SSDEEP
768:n1PaoMAC9K3kLyZZjkgOCkU0cjLrbv0sL9gOVDjD5eSJ8Oqhm/A6WEqhXL7/yUSs:n1P3M71hC0cv3RWaDjMSVWDaaqa
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ