CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1ed8a343d67c5c16bf4b3f49a162a80d5a627644c2e37fe7f88e2b0e901e58dc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1ed8a343d67c5c16bf4b3f49a162a80d5a627644c2e37fe7f88e2b0e901e58dc.dll
Resource
win10v2004-20220812-en
Target
1ed8a343d67c5c16bf4b3f49a162a80d5a627644c2e37fe7f88e2b0e901e58dc
Size
50KB
MD5
528c50b41244e4801dfdf89623e9015b
SHA1
d7e343228e70e953e1aa9a2f2c7263adc2f94340
SHA256
1ed8a343d67c5c16bf4b3f49a162a80d5a627644c2e37fe7f88e2b0e901e58dc
SHA512
d6927fa053460e657d85ef2cdb473ac71d04754cd8fbb0769428ecae9613451086d52693d2bcb60cf3660b7474c666d1c4ec1a164a869701d23f6af070b12a65
SSDEEP
768:SUs6x6tc/TnBgIOJ5Tq1Zt5Jt5b0rRfyeez4/BuvFjWoX1DbTKlTCf:n56EgIP1Zt5JtKRfyew4/MvFjVFD6Q
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ