CancelDll
LoadDll
Behavioral task
behavioral1
Sample
68f8395b483743f82f4d7df43f73c1e9cf4b47d06e731b5120f4de1c8d1f26f5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
68f8395b483743f82f4d7df43f73c1e9cf4b47d06e731b5120f4de1c8d1f26f5.dll
Resource
win10v2004-20220812-en
Target
68f8395b483743f82f4d7df43f73c1e9cf4b47d06e731b5120f4de1c8d1f26f5
Size
49KB
MD5
6934d9c6bd6f8311ef116f6f504f9f2d
SHA1
fc008f906d948841f1a4ac9d8e5d5b3667fd06bf
SHA256
68f8395b483743f82f4d7df43f73c1e9cf4b47d06e731b5120f4de1c8d1f26f5
SHA512
a3c6350abc034f231b2cb2da24d9fb6711892c3734983796c6361d505d1ebcbb57bc6e6634c83b2b8a9a94dd563c6fd46a6646477b937e9cbf82bd66cdb7c950
SSDEEP
768:DVV27Pk2b+S9zwj3gV+VEtPgbCSP0XJBXE3ZiapL07tYVtMoBiYGcpYgVjJ:DVV1HTXVa8n8XJEV07tYfMowYnYs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ