CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a190bb926d2aa07e57607c63259ac21e718807a24b6b08bc5617be4072735cdb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a190bb926d2aa07e57607c63259ac21e718807a24b6b08bc5617be4072735cdb.dll
Resource
win10v2004-20220901-en
Target
a190bb926d2aa07e57607c63259ac21e718807a24b6b08bc5617be4072735cdb
Size
77KB
MD5
517a3dbb83a8b9bf0d776031b1c48359
SHA1
04b6b248fbe5fbf2de102fce6694564ce72803f1
SHA256
a190bb926d2aa07e57607c63259ac21e718807a24b6b08bc5617be4072735cdb
SHA512
d5a503b2f5335d9d15f5a129b099694b3a6d07f6de7b4fcda23c0e2692ec05b75bfff2c80fd06d8ff1d3152eaed17524bb1f8b0ed87361081740f48c0d0c4498
SSDEEP
1536:DVV1HTy1PN1oCtnO9xWqUIddswijx3iwhlHaBJ76SwUTCCCcmx3x8a8ijV0:DVrG11+CgLXwr6BzP+Cw3EijV0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ