CancelDll
LoadDll
Behavioral task
behavioral1
Sample
016aec8626cf0bc88deb6ae19fa0750f54e95a2d130f93ef8e2f4878632d4aa2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
016aec8626cf0bc88deb6ae19fa0750f54e95a2d130f93ef8e2f4878632d4aa2.dll
Resource
win10v2004-20220812-en
Target
016aec8626cf0bc88deb6ae19fa0750f54e95a2d130f93ef8e2f4878632d4aa2
Size
74KB
MD5
24d4c494e725ed85b1fd775acbb42533
SHA1
8a07d31441dad1f65020df73e380321b5f28c1fd
SHA256
016aec8626cf0bc88deb6ae19fa0750f54e95a2d130f93ef8e2f4878632d4aa2
SHA512
2111ba6e57bbe7738e3cb902f7f219906d4032848be94e657c336588a17c5503b34a30ac8f218cf368527d949a4bd4e4148787e323f3afe0b946dc47fb86bfd3
SSDEEP
1536:68C3PjhLOyHTLmcCD7WoF/2f2+Nhfd7TI2vDQEpqz7O1:68APjbmFD7WC/2f2+Nhfd77DQE67A
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ