CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2b93bfecdd4755da5e9dabdfe4f13bae933cd858fd1835a488bb29e9cfa89c50.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2b93bfecdd4755da5e9dabdfe4f13bae933cd858fd1835a488bb29e9cfa89c50.dll
Resource
win10v2004-20220901-en
Target
2b93bfecdd4755da5e9dabdfe4f13bae933cd858fd1835a488bb29e9cfa89c50
Size
48KB
MD5
7bcef91503019bc03fa06efacd073689
SHA1
3f62484179d9ca78fedbc2956b9f1018c3640217
SHA256
2b93bfecdd4755da5e9dabdfe4f13bae933cd858fd1835a488bb29e9cfa89c50
SHA512
079b3c636aa0869d1b253392176ff3d83b629f000ea49d78932e61c4e849ac5bbfd152e8b913b7f1535f20f9a3bd2d0d1a7b0e016a46f179491e36bc91ebfed6
SSDEEP
768:7nl7ZX0LityRecQ5X119rc7NNeDGbe9UEdetGLxTwyQfPT8EqhlsE2nmJU0WOT7e:75ZXMityecVNNeSeGCetxDAsE2m9pTK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ