CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ab81368d9daed831abde6c0f0c4e688b4614c68a3bc4e1cd191d3349f94c5650.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ab81368d9daed831abde6c0f0c4e688b4614c68a3bc4e1cd191d3349f94c5650.dll
Resource
win10v2004-20220812-en
Target
ab81368d9daed831abde6c0f0c4e688b4614c68a3bc4e1cd191d3349f94c5650
Size
57KB
MD5
7bce2fdb883eb240bb4a02c877f32c33
SHA1
4b0f9ef982092ef03cc0dfd444bfb693c10b2a0b
SHA256
ab81368d9daed831abde6c0f0c4e688b4614c68a3bc4e1cd191d3349f94c5650
SHA512
fe9df7d14fc864005ad3d4d46c49fd3553ac789f68dfa05680bb07ee7084ef1fb57cec3303b8cab7d60339f1325fe8d4bf272c7bb8c677d32e2d6e2e33e32255
SSDEEP
1536:dQ76ypVpcBPy7KqapZE/M7ySWrbknkJpeM:S75V6unapZwSWPtp5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ