CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5dde7ed098f8a32b28380abf5e81ff3c9536d81805eae6e872dada5cd635b810.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5dde7ed098f8a32b28380abf5e81ff3c9536d81805eae6e872dada5cd635b810.dll
Resource
win10v2004-20220901-en
Target
5dde7ed098f8a32b28380abf5e81ff3c9536d81805eae6e872dada5cd635b810
Size
66KB
MD5
604b1a092ff145ef7170167a9ce17cec
SHA1
935b4d29d2113053d6ca709da54d36697fd0be8d
SHA256
5dde7ed098f8a32b28380abf5e81ff3c9536d81805eae6e872dada5cd635b810
SHA512
77db435f7d92a4e021c9ebc28545be95ff06f79aceaefc143d920e9cfc501c5297610a84349dbf11d077f15787c22dc0dbe8cfca99651e2e67834d200e2e40d9
SSDEEP
1536:DVV1HTdPWwUvoMdSZO/LySqkZpXaMhV5PUK:DVrxPW8MdS43qkZpXdh38K
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ