CancelDll
LoadDll
Behavioral task
behavioral1
Sample
348a6c43d0958151d10ffa369185bdbdbf9c13ebb559ff72884d3ea0afd6ad70.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
348a6c43d0958151d10ffa369185bdbdbf9c13ebb559ff72884d3ea0afd6ad70.dll
Resource
win10v2004-20220812-en
Target
348a6c43d0958151d10ffa369185bdbdbf9c13ebb559ff72884d3ea0afd6ad70
Size
63KB
MD5
452e89a9f995dd6a16020d79636b4d79
SHA1
5df6d66c7715e4809034476708c1a4e673b2b223
SHA256
348a6c43d0958151d10ffa369185bdbdbf9c13ebb559ff72884d3ea0afd6ad70
SHA512
839f2fe03725640eaf9731f736de1cbe103426041768e3919aa9e3f344a0310df1910172341ba0794c69e911b9f30faf471d8f3eb7ab80f910eb248ba4752798
SSDEEP
1536:dQ76ypVpCmCfT6xR5OBA4XvaR4M0lRE47WaGRdqREVEI6:S75VkWR5OBAGaR4lRE4CaGORS6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ