CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ffe48f9b8160d2ea0f9245fefc78a7542ab726e71f084bdc8bbe7f2c4a22c82f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffe48f9b8160d2ea0f9245fefc78a7542ab726e71f084bdc8bbe7f2c4a22c82f.dll
Resource
win10v2004-20220812-en
Target
ffe48f9b8160d2ea0f9245fefc78a7542ab726e71f084bdc8bbe7f2c4a22c82f
Size
53KB
MD5
638457ba175b707f3f003fcc91f07e80
SHA1
f5641958a99dc464bc7949f839802aeb65655ad0
SHA256
ffe48f9b8160d2ea0f9245fefc78a7542ab726e71f084bdc8bbe7f2c4a22c82f
SHA512
9cb8fca4500e96ae644f61dee77edbc8c4cef33b4493a7d0cf9b83eb26a5b24ce1a998f3d6dbb3d88d1e13f30fd4ee7920411ead87048ae731fcb61d92be06eb
SSDEEP
1536:v9kvc4uNpnCnMfgbi2zrAm+GDP+Zw1Nxhq87r:OSCnMYbbr5rD+mxhq83
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ