CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a24a7b4b5866282248ccc06f1e4f3ce2da53486652deb42799786ffcc9fa4994.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a24a7b4b5866282248ccc06f1e4f3ce2da53486652deb42799786ffcc9fa4994.dll
Resource
win10v2004-20220812-en
Target
a24a7b4b5866282248ccc06f1e4f3ce2da53486652deb42799786ffcc9fa4994
Size
65KB
MD5
225cb5a3af2a7578c8acbd197a9e1833
SHA1
5cdf8412362b8334756990de5e90c705ebc9defd
SHA256
a24a7b4b5866282248ccc06f1e4f3ce2da53486652deb42799786ffcc9fa4994
SHA512
759bd48e15b69c89ff376f6ea2d8e4d33ba874f4a74d24dae37d1cf796ce227ea5463108f74c4acb1077dacfb99c1c67d2aadd253c6330a585cdefc2c41f0b0f
SSDEEP
1536:DVV1HTpv+htmqC8+qpbRquUmBZvRo6sunIAaErEMG2Usdsh:DVrVv+rzHRRq4DvfGAnGTcC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ