CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b6c270f4819f82690a8430ac9741c8a3cf121110487200ad7ecd3b8d1f38ba29.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b6c270f4819f82690a8430ac9741c8a3cf121110487200ad7ecd3b8d1f38ba29.dll
Resource
win10v2004-20220812-en
Target
b6c270f4819f82690a8430ac9741c8a3cf121110487200ad7ecd3b8d1f38ba29
Size
66KB
MD5
60b8029d41c3ba545c665e35b138297f
SHA1
7884b2966cf01e82446ea60470c232b7f81d08d9
SHA256
b6c270f4819f82690a8430ac9741c8a3cf121110487200ad7ecd3b8d1f38ba29
SHA512
11d01b51831573668ec587b865fe214030e02ee9edde3f9b85ef5fbbf2430bc9489dee0fd7110adbf751e26cfffb08130dd5ec085ec3df9d01f935a4c662af55
SSDEEP
1536:EdNs9O6qwtr2BQBfq+nzqWxfqeOro9UkQBn1FiA3kwX4D/8:EdNs9O6rrNXzqW5Q4Q5Lija4D/8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ