CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cf3adbbe733c2acb29522ce611ca9ba5df444f2c020c95ed27492d9365167726.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf3adbbe733c2acb29522ce611ca9ba5df444f2c020c95ed27492d9365167726.dll
Resource
win10v2004-20220812-en
Target
cf3adbbe733c2acb29522ce611ca9ba5df444f2c020c95ed27492d9365167726
Size
50KB
MD5
249257d80dba513767daa5bd3ec6add9
SHA1
dbaa92a4071e965a3a4eccfa21339dec5a46f826
SHA256
cf3adbbe733c2acb29522ce611ca9ba5df444f2c020c95ed27492d9365167726
SHA512
4ed1afe89041525f819d6c10a71f95000c3ab1f0df62e3c59112252850603d217b375bbc47a173cd92c886e2cbc18e6aaa40372667556117a8450668947ed3b2
SSDEEP
768:DVV27Pk2b+S9zwj3gVfPPdky4te+xpe1VgR8Fp2fFH+A2UYelrECVfd:DVV1HTidkySVxpengRE8F+0FE2fd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ