CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cf87b2ef6a338fd38b7e4d215c8bf35e219124c7c04e954f2856104be02817df.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf87b2ef6a338fd38b7e4d215c8bf35e219124c7c04e954f2856104be02817df.dll
Resource
win10v2004-20220812-en
Target
cf87b2ef6a338fd38b7e4d215c8bf35e219124c7c04e954f2856104be02817df
Size
64KB
MD5
68d886d69ee50201cd11ec5b5d32eb99
SHA1
55b346d907c58b5c0bb4ed7706e1b80d8af4bd29
SHA256
cf87b2ef6a338fd38b7e4d215c8bf35e219124c7c04e954f2856104be02817df
SHA512
f5bf464d80679b1b30ef970b2b02211cb84aaeca303be5248aa3783c4a34d684772adf547b0fa76555997e96a528cbdc9eb0c93d3e11204fac44063b23b01d95
SSDEEP
768:DVV27Pk2b+S9zwj3gV+gy/2qwq3NfBreNxcMZN5s0/OnS3fUW4zmqEH3kZELemnS:DVV1HTZdfBreNzN5s0/X4zzaUqLLov
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ