CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d9fad438f856047a9976015d393e4596df1f304c2984c7e56af1e7921c5fc940.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d9fad438f856047a9976015d393e4596df1f304c2984c7e56af1e7921c5fc940.dll
Resource
win10v2004-20220901-en
Target
d9fad438f856047a9976015d393e4596df1f304c2984c7e56af1e7921c5fc940
Size
65KB
MD5
694da5c2accf1eb0087227d74dfb64a9
SHA1
5c8c12b8a6dd40ab386b49bf3e4b97a59f98f5c4
SHA256
d9fad438f856047a9976015d393e4596df1f304c2984c7e56af1e7921c5fc940
SHA512
4b491e8accf1a38c75c76569949aa5979e18c07b6ab19f07a527a3a1dcde61cad08915ebfd3f2332ed1aba8ab9a5226a2b833c899f18a96e5d33e56ace801c65
SSDEEP
1536:Iykzkag9WSLhBTtDm8TbUr4e/LPNW8KWaa/8xDuK:IFzkaLSLhBTti8MrZc8KbaUxSK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ