CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f2e83843b7947e149c5558f71d6d1e9cf264e4a967709240c6d94ec8ef076e00.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2e83843b7947e149c5558f71d6d1e9cf264e4a967709240c6d94ec8ef076e00.dll
Resource
win10v2004-20220812-en
Target
f2e83843b7947e149c5558f71d6d1e9cf264e4a967709240c6d94ec8ef076e00
Size
59KB
MD5
774d75037ec1811ee45d6c967424b957
SHA1
f473d5a95d89fe8656fe5785e65f2bbac8620e08
SHA256
f2e83843b7947e149c5558f71d6d1e9cf264e4a967709240c6d94ec8ef076e00
SHA512
cd5893b9aa50fdd9bc9ad680f5ef7490a7e23fccfa1d11b58633c02a43d436cc9c59d86ed8a33cfcc20c16cebe3c3270294b42a20d9abc5ae18f7b2adb1c0b29
SSDEEP
1536:dQ76ypVpFNBVY86DgFdFqmdp6hvHusTubVdf5ATsM5lqcGQOaLcDyDwD+E:S75VRBVY8CgFvpMvH9T4df5IWcCQmyDA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ