CancelDll
LoadDll
Behavioral task
behavioral1
Sample
04f6d2cf0d4b9d1b81aab7bef8b13e4f5754f0e286c64e80554d969cbfdf33d8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04f6d2cf0d4b9d1b81aab7bef8b13e4f5754f0e286c64e80554d969cbfdf33d8.dll
Resource
win10v2004-20220812-en
Target
04f6d2cf0d4b9d1b81aab7bef8b13e4f5754f0e286c64e80554d969cbfdf33d8
Size
65KB
MD5
7b13bcb40fc4bac708aab41da49f12ae
SHA1
1bbceab853d7d5e5acbc2126e452faef6899833a
SHA256
04f6d2cf0d4b9d1b81aab7bef8b13e4f5754f0e286c64e80554d969cbfdf33d8
SHA512
ad83172c338631c73b568fae095b5b0fbe4ef3948ae292f64f6fc80a4e5c6827d116225ba8664331eedb2b7a2630b2ca28541629623725901b13776ec12e02a9
SSDEEP
1536:knK0jhOKw+RTnjcWyxdTqreurlYYLL/zosIoW26oFbtkUtzQR:knNhOKw+RTjFkNqrbrlYaL/zBXW26stM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ