CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b4264934a50f7e3883e007e16d41cfec79761a304b132fe8617113a08824a911.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4264934a50f7e3883e007e16d41cfec79761a304b132fe8617113a08824a911.dll
Resource
win10v2004-20220812-en
Target
b4264934a50f7e3883e007e16d41cfec79761a304b132fe8617113a08824a911
Size
58KB
MD5
74c389a2fe04bbe09029f775fe8c2d3f
SHA1
ad0483db6a724e5ee4a19c3bdfe2ff4e9e8f7447
SHA256
b4264934a50f7e3883e007e16d41cfec79761a304b132fe8617113a08824a911
SHA512
796ea27d2011eef31f7e0c6b8b5b018227439b33e25d35a0cc7dbb91b9e7bd2d72df11aead1eea81da38693ecf6bebde988785a9d97f69a7cc8bd9c9581ba00c
SSDEEP
1536:jPeWoaaMsZGaJf+kcSGj2Sa2fcybCJCF3g:CgaRZGqNGySaICK3g
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ