CancelDll
LoadDll
Behavioral task
behavioral1
Sample
848aa91983f91597663fd2eccd3e7e58e1b560f8b2d1f50974986cb51bf59715.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
848aa91983f91597663fd2eccd3e7e58e1b560f8b2d1f50974986cb51bf59715.dll
Resource
win10v2004-20220812-en
Target
848aa91983f91597663fd2eccd3e7e58e1b560f8b2d1f50974986cb51bf59715
Size
73KB
MD5
55c54b472c9540668c3f215492b69150
SHA1
1025e9ba93265086b854303f38fe09f62ba15ca2
SHA256
848aa91983f91597663fd2eccd3e7e58e1b560f8b2d1f50974986cb51bf59715
SHA512
c333a398075e6e98fa0a258e9a6cddea098796b14f302b30bcf9b74c3b78c255d19629a789a305d7167390d41f06971368d183876e11d7e1fb3ceb512b9d5cb0
SSDEEP
1536:yjJMzqRhEZLaWq0r0OaoFzq5YzUgsXiR1MEGs9Q8LFfO6itejL4tc0:ObEJaWfNZFlzzsXiR2MHZXeejq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ