CancelDll
LoadDll
Behavioral task
behavioral1
Sample
332de0ff9fb16282d5187369be05e990113ee9e00ce09700863c291e2c17d29d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
332de0ff9fb16282d5187369be05e990113ee9e00ce09700863c291e2c17d29d.dll
Resource
win10v2004-20220901-en
Target
332de0ff9fb16282d5187369be05e990113ee9e00ce09700863c291e2c17d29d
Size
63KB
MD5
1b4c79b8e64eccb06751c4bedce96e90
SHA1
1fac78dafcc33df1f8656cf9f0c7938ca49d99d6
SHA256
332de0ff9fb16282d5187369be05e990113ee9e00ce09700863c291e2c17d29d
SHA512
916ab324c537cb8ad4e3c07c93874b13bdb595108e111960573df7c20be948311faf159a02d8deec6afb56e44fc771af66c2f4da042a37f1de2b8a00ecceb884
SSDEEP
1536:lTESkEqKUVyCCWkDBvKNHF2QW5Z1iqy0rRMBE4ItEI7O:6SBKVyCCtZK9gQYZ1ibQRMcLy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ