CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0d9c8445284e80110cc4e5dd2ec757213ce52579d5e652437e4f25e6cbfee470.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0d9c8445284e80110cc4e5dd2ec757213ce52579d5e652437e4f25e6cbfee470.dll
Resource
win10v2004-20220812-en
Target
0d9c8445284e80110cc4e5dd2ec757213ce52579d5e652437e4f25e6cbfee470
Size
93KB
MD5
159fb4017f6e29b9a9287a656ad89310
SHA1
a56bf591364f92be8f20daba81e95b971bea7a91
SHA256
0d9c8445284e80110cc4e5dd2ec757213ce52579d5e652437e4f25e6cbfee470
SHA512
4e4beec018b846179b8c60449fa8856c4f4515c2c04f37b6e1b9e46835de2e1fb95ab5bc687928acfeb83ed8dda7b3ea4b52801cd0fd09a4bea00e2eefcced5c
SSDEEP
1536:Pzj0rTaWtPEC8GSlEUjyY4lRDUNbFD1d0VyyVeS064ocUXa6b+u7qqONy0u6Ig/i:7jHgPXSljyY42mVykPNXa6C+POy6PHq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ