CancelDll
LoadDll
Behavioral task
behavioral1
Sample
56f250738b975ce66688e2e59f2781a98c563263e60e351d75c7872ac5ea8dcb.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
56f250738b975ce66688e2e59f2781a98c563263e60e351d75c7872ac5ea8dcb.dll
Resource
win10v2004-20220812-en
Target
56f250738b975ce66688e2e59f2781a98c563263e60e351d75c7872ac5ea8dcb
Size
59KB
MD5
31e4b3dd2b3944c3418946f5eaa3f3a7
SHA1
b919ca67bd8fbef082b392f7a1e83336dd68fb42
SHA256
56f250738b975ce66688e2e59f2781a98c563263e60e351d75c7872ac5ea8dcb
SHA512
4c41ad8f171c7872ad0d355a956b29f2a4133ea99bde04810f0fd5c743eefb009e0499897232da2394854f931d724588b9393631753be2d6408bc85667182310
SSDEEP
1536:n56EgITkK4ezqQWETyVFh++/+RmyvsPNzjUMfu:n56Bz2jTyVFf/+p8NDW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ