CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ab48ac56b44d51a30fd08e25088cc764d62f72ea086f2e11b596617412f2bcfd.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab48ac56b44d51a30fd08e25088cc764d62f72ea086f2e11b596617412f2bcfd.dll
Resource
win10v2004-20220812-en
Target
ab48ac56b44d51a30fd08e25088cc764d62f72ea086f2e11b596617412f2bcfd
Size
72KB
MD5
67dbc5f1329b92be5ee24de516905950
SHA1
a503997714b95339db202b958c8148c9290039c1
SHA256
ab48ac56b44d51a30fd08e25088cc764d62f72ea086f2e11b596617412f2bcfd
SHA512
6da2932aeb9fecd3a264321b7dc944f19f37ffe29c8bbb90fd78e76655e5eb5941eb862714328632da283aede4d0dc32a30727a8110dd77d8b70356166919d2c
SSDEEP
1536:Jd8cHHQR/kgZEbVxH4ujLuJnL2H4V4LWMF1dlF/80Qpp5:jfHccmEbvH4iRY+LWMF3lCp5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ