CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f8b79369cf6611ea806d83f61e3948d9090ccacafaaafaba09ddf113306d0591.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f8b79369cf6611ea806d83f61e3948d9090ccacafaaafaba09ddf113306d0591.dll
Resource
win10v2004-20220812-en
Target
f8b79369cf6611ea806d83f61e3948d9090ccacafaaafaba09ddf113306d0591
Size
66KB
MD5
68981940665d73d44b3d8c9bdead8cb8
SHA1
faa28069a929355c0bfa1dbc1dc219d890e87283
SHA256
f8b79369cf6611ea806d83f61e3948d9090ccacafaaafaba09ddf113306d0591
SHA512
4eea2d52927c3cab109b2cfcc54a961b0ea7fe1e4a9b6aa9d80ddf54c2017c5dce018f85092c32a88d2ac6b1f625efb239967ba59d9a280ec0d86b0ab9d11f14
SSDEEP
1536:CjAO15+B57VKrKYCfbTA1SLK6MhvKQs//v44aqAk:CjAO+AmYCfA1WpAvK9T
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ