CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d8cdd7fc74615963d7fdd35b26f52558b3a23f48349cf231cc6275cc77a4c204.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8cdd7fc74615963d7fdd35b26f52558b3a23f48349cf231cc6275cc77a4c204.dll
Resource
win10v2004-20220812-en
Target
d8cdd7fc74615963d7fdd35b26f52558b3a23f48349cf231cc6275cc77a4c204
Size
60KB
MD5
60a6dc29c8c68e564b2563d1daa65273
SHA1
d5e4d15e750206d5ce11dee1ce7be49641fe3fa5
SHA256
d8cdd7fc74615963d7fdd35b26f52558b3a23f48349cf231cc6275cc77a4c204
SHA512
ed8d3b333c74f1b1b5256bd0d1bdd264dc440ed37bd174d538fa14b11b605794bb55918be48247ee200075b9176535f1a9159fbe2aa9d6ff988ff3e3b0385a33
SSDEEP
1536:VOzB/iUduhnm+fNZkDJiEHrJBRgvds/NKC++ZG:VK/iKuhnm0kV/oluu8G
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ