CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9caca9121c27b73acaf0e74f6033d868d1730933ff309af9a7d133f7ab2e9a98.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9caca9121c27b73acaf0e74f6033d868d1730933ff309af9a7d133f7ab2e9a98.dll
Resource
win10v2004-20220812-en
Target
9caca9121c27b73acaf0e74f6033d868d1730933ff309af9a7d133f7ab2e9a98
Size
74KB
MD5
793e9de6a0627159cbd9544b19655607
SHA1
78aced31070f8cac8ae102ccef7c2e5c639373c5
SHA256
9caca9121c27b73acaf0e74f6033d868d1730933ff309af9a7d133f7ab2e9a98
SHA512
b1fb955f8a0a399867193614664ff3f30ad91a330456115749b50d526bd7f0f2422c5d9cf1ce0dacf77244b34e1f2633ce251e1e75130505edce056a8541018c
SSDEEP
1536:EdNs9O6qwtr2HlqNZkvsrPQoolp4iwbnXKGHAN6omBMnu8dRsdz:EdNs9O6rrHNZkvmPQoaplwzX68Dn7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ