CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cc8f9e509b01a1e1054ad7407539ad10e0a01b8fe0fd33f6484b5684c4fe2f0a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cc8f9e509b01a1e1054ad7407539ad10e0a01b8fe0fd33f6484b5684c4fe2f0a.dll
Resource
win10v2004-20220812-en
Target
cc8f9e509b01a1e1054ad7407539ad10e0a01b8fe0fd33f6484b5684c4fe2f0a
Size
62KB
MD5
413f08d3c893d58e7ea51b45fcd78143
SHA1
38edc6e99bb69deff89af7d05ef1ab60c82da73f
SHA256
cc8f9e509b01a1e1054ad7407539ad10e0a01b8fe0fd33f6484b5684c4fe2f0a
SHA512
ec68f2052a01fc2053c90e8b8f1fc1cfadccd38be90e80f842d1a226c5cc5ddd16f4eeb384db598b1074db199c95ea3810ed2fecae91be5f322ae6f04f4f0717
SSDEEP
1536:OsuX6JNBllDI5R8HBLtY4xqSzMBVBIC5oCwwx:1/b9k5eBLJxqSgBLteCwwx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ