CancelDll
LoadDll
Behavioral task
behavioral1
Sample
29970352cab7c5bf48c729779b8797b48f0265cc23ec3785cd4be7e73b1fe2f9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29970352cab7c5bf48c729779b8797b48f0265cc23ec3785cd4be7e73b1fe2f9.dll
Resource
win10v2004-20220812-en
Target
29970352cab7c5bf48c729779b8797b48f0265cc23ec3785cd4be7e73b1fe2f9
Size
60KB
MD5
621b307ae1ca2cc1eeb4c234eec3c90e
SHA1
6fe87529c095afe8f16cde5dc301afcd17fbca61
SHA256
29970352cab7c5bf48c729779b8797b48f0265cc23ec3785cd4be7e73b1fe2f9
SHA512
395556f11626e06cca0d38e0bae1502f1345a0297ec6fb066c8ce8bfe061cc870cfbfc48d821a5411cf2e897ef3d0af19cc8dfdde07f5b691912e34e725d0b6c
SSDEEP
1536:dQ76ypVprXpfcru+nMTsb2ZRJDhWyhlUYr+:S75VFprUi02ZRJDdlg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ