CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fe290b2645ba02632f6f5ee982d3a7b3aca2fbb7d3b51560d058fe46f95032bb.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fe290b2645ba02632f6f5ee982d3a7b3aca2fbb7d3b51560d058fe46f95032bb.dll
Resource
win10v2004-20220812-en
Target
fe290b2645ba02632f6f5ee982d3a7b3aca2fbb7d3b51560d058fe46f95032bb
Size
65KB
MD5
6802ca2f81ffc7ed6d2a9f8830ab411b
SHA1
fd7fb48b1b5e2d7b0d7aa379c06579752ad711a2
SHA256
fe290b2645ba02632f6f5ee982d3a7b3aca2fbb7d3b51560d058fe46f95032bb
SHA512
d1df65308db853ab23d40580a651949212609ac74041a3815aba715b272f2dfa43c7e1c028ee7fb2a8974fa300391f90b2cb9c8fc6bfdae19059dc711c17eba9
SSDEEP
1536:75ZXMityecG9SEfAxbkQNDc2nk6N3n5gvdmXz6BOkK0qts1IB9/p:9ZLncG9SEQkQNDpNX5gvd+F0qtuIf/p
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ