CancelDll
LoadDll
Behavioral task
behavioral1
Sample
21cb2658cc0cb953e45d9b1c81ebe5c40ab4c3f5811ecd61f3cf6d656e34fe43.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
21cb2658cc0cb953e45d9b1c81ebe5c40ab4c3f5811ecd61f3cf6d656e34fe43.dll
Resource
win10v2004-20220812-en
Target
21cb2658cc0cb953e45d9b1c81ebe5c40ab4c3f5811ecd61f3cf6d656e34fe43
Size
68KB
MD5
612f302fa2afd2ac23ea48b4710fb3cc
SHA1
2e873f82d14ff208cf599df8b68f6fd828fb4c62
SHA256
21cb2658cc0cb953e45d9b1c81ebe5c40ab4c3f5811ecd61f3cf6d656e34fe43
SHA512
3fa9cc4371659483fa60a689120d908fd334ffa990b5fd3a1dc0ae7f0a5b8b065bf2bd3b75be25465b9a72dd72b5611e3ab629f9089b0017bd5b5bbbf6e55cc3
SSDEEP
1536:dQ76ypVpf8fy1kc5s1Ssw76vOoLnxG/cbz61Gyj3EM4ec/:S75Vafrj1G7SLxG//1Ga3EHB/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ