CancelDll
LoadDll
Behavioral task
behavioral1
Sample
49b7b7ad965b6d12851d86ffee3d5ae3940c09944535f463cb740a7e0483150a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
49b7b7ad965b6d12851d86ffee3d5ae3940c09944535f463cb740a7e0483150a.dll
Resource
win10v2004-20220812-en
Target
49b7b7ad965b6d12851d86ffee3d5ae3940c09944535f463cb740a7e0483150a
Size
66KB
MD5
7435da757815d08e6315f0e21af62951
SHA1
7cc239b57f9ebcfd7f3e5ccbbfeed30c64a3cb48
SHA256
49b7b7ad965b6d12851d86ffee3d5ae3940c09944535f463cb740a7e0483150a
SHA512
e552e7164a7231967dcc6008c8055642528c124781cde9bbee7866007ffc6574c3c8a91bdc5f0ccfb153a3b64195c26b9cc6f19dd67515f0b37a6766617c8e6e
SSDEEP
1536:yjJMzqRhEZLaWsV4sCU4dAGsCRda+UqlyOMvzIKugtnuDUSNWnuU4Sg:ObEJaWsVSt2GsCX1UIy5uanuDU60uUtg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ