CancelDll
LoadDll
Behavioral task
behavioral1
Sample
db5450f3560d1be7992d3820d5cf450a5a7ac5bd270437ffdc3f2334e9c0372b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db5450f3560d1be7992d3820d5cf450a5a7ac5bd270437ffdc3f2334e9c0372b.dll
Resource
win10v2004-20220812-en
Target
db5450f3560d1be7992d3820d5cf450a5a7ac5bd270437ffdc3f2334e9c0372b
Size
66KB
MD5
67a9013ccf2722a2278c65f9369611aa
SHA1
428637d3a849b9e7f73c0f8a5ca05e57d45e3e8e
SHA256
db5450f3560d1be7992d3820d5cf450a5a7ac5bd270437ffdc3f2334e9c0372b
SHA512
b4a9968cf253a030d732c4b548aca3c8a444607727703cf128202c445e42302efa5f929a0fdb85671f88c16587653450f01382f2f42b81bcb349de180a8281a6
SSDEEP
1536:NomNZnI+CQSrNSzr2cgR2vk2csSngRyaYUTN1mplDtaMke0EepRfIfAQpC:NooC+C4r2cgR4BSgz2LYWfZC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ