CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b1fce9ee88f455296040f7083f3e8b1a41f67e74758b25175fda62b70049e046.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1fce9ee88f455296040f7083f3e8b1a41f67e74758b25175fda62b70049e046.dll
Resource
win10v2004-20220812-en
Target
b1fce9ee88f455296040f7083f3e8b1a41f67e74758b25175fda62b70049e046
Size
54KB
MD5
6d1941aaeb615f44e81160f3b261d34e
SHA1
690cefbc8f540165ba3f74a53ba83c18cd1b2d18
SHA256
b1fce9ee88f455296040f7083f3e8b1a41f67e74758b25175fda62b70049e046
SHA512
aafd08b61b504e754fbbd62588c8c137bc2af459252e542c7e1e816fcc13e37b66944a9aef12533614452781515a8f9e3f560ecca9455524363d86402de37f51
SSDEEP
1536:jjmxLPyVQCDmdKad6ofPkWcCXbK41QRSfufT:exLPyCamw86onkW1bKMoSfi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ