CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b7f53bac6fd9157ecc2d8f7ffa123f9699370950617fa5ec85238abb633914d7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b7f53bac6fd9157ecc2d8f7ffa123f9699370950617fa5ec85238abb633914d7.dll
Resource
win10v2004-20220812-en
Target
b7f53bac6fd9157ecc2d8f7ffa123f9699370950617fa5ec85238abb633914d7
Size
64KB
MD5
696803570b0d7e177701be59590fb452
SHA1
c8f90f91b0e9d858f771dbf7390c7c6d31299fcc
SHA256
b7f53bac6fd9157ecc2d8f7ffa123f9699370950617fa5ec85238abb633914d7
SHA512
3e557c371010a0dbbdd146f982f488402da8541727a721da7b57c75dcc20f3554807a4ceadf7409b049832e5f80447bfda6301da6aaad546d9e10be9d4e90284
SSDEEP
1536:dQ76ypVp/i/FwqjY6QBmOpoMRlkQkvJh0j82592:S75V9iNwqjaBmOoMRxALH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ