CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ef0d662928b4bcbcbbd9a42e4321ab650c4c47b04623755ce9ae7fc7ce4a4da5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef0d662928b4bcbcbbd9a42e4321ab650c4c47b04623755ce9ae7fc7ce4a4da5.dll
Resource
win10v2004-20220812-en
Target
ef0d662928b4bcbcbbd9a42e4321ab650c4c47b04623755ce9ae7fc7ce4a4da5
Size
58KB
MD5
7b7e1c5ca459b77355b94193b0fcb8ba
SHA1
19dc0e9fbbad81639e8ca1a69eb84ce2a8531f65
SHA256
ef0d662928b4bcbcbbd9a42e4321ab650c4c47b04623755ce9ae7fc7ce4a4da5
SHA512
ea66b52604fb330b35eb95f3f4915d5c700f0b8c6b288edb3c57a9949b6449e730de0883579791e41eb6b52b5b660a12167f1b1d90fc13075515c20d51037ee3
SSDEEP
1536:DVV1HTocVSsHGwaU+CINFR5dgOickmj8EHB:DVrccVSsHGwaU+CINFR3kBoB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ