CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7066b5c3236fc8be351729f2d10a7c011d625c1e1b86f1a1fab07c0e395d1e17.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7066b5c3236fc8be351729f2d10a7c011d625c1e1b86f1a1fab07c0e395d1e17.dll
Resource
win10v2004-20220812-en
Target
7066b5c3236fc8be351729f2d10a7c011d625c1e1b86f1a1fab07c0e395d1e17
Size
57KB
MD5
68df3a0a690ca47d3e50f47d08bfc81f
SHA1
88238e0672269b599ec4fbe4c38a9dac95d74b55
SHA256
7066b5c3236fc8be351729f2d10a7c011d625c1e1b86f1a1fab07c0e395d1e17
SHA512
b98c0e25d8d21bf90a5949478cdcb7d2a3300153fa127b4c6b74868f66465df36ad527f1f8109d363a829ca48c1da5c8d57e031501f1ae5123a2dd2bd1ad34bd
SSDEEP
1536:grl1KpEMhawfrdKK3XrckzP0T0kuPABs7Ozj88Y:grlpL2BKyPs0kiAa72XY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ