CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a1acf0639ebb24091a454f9e86ea5badd747c1020ced9daf4ea91b0f26f7627d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1acf0639ebb24091a454f9e86ea5badd747c1020ced9daf4ea91b0f26f7627d.dll
Resource
win10v2004-20220901-en
Target
a1acf0639ebb24091a454f9e86ea5badd747c1020ced9daf4ea91b0f26f7627d
Size
58KB
MD5
69728162fe1f06882591233b2759532a
SHA1
6f946201ecfc57bc2680f2bb9aee707de7e05a5b
SHA256
a1acf0639ebb24091a454f9e86ea5badd747c1020ced9daf4ea91b0f26f7627d
SHA512
1b76c2d2db04b300dec05a404247a4dc5098e0d645f2f83886c861445ca0d0ae8d6319466ef1d234424f1ea2756d1d2ca56cc1bc33a0ed94a67f4826283350de
SSDEEP
1536:EdNs9O6qwtr24/voeIl98p2R6/H9EpwKlHl6dK:EdNs9O6rrRvoRldAVEpwKlF68
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ