CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f2e2e3b7ec0143f7a0c4d056eebc5c2ba9fc946b04782307a8486d14b1147af8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2e2e3b7ec0143f7a0c4d056eebc5c2ba9fc946b04782307a8486d14b1147af8.dll
Resource
win10v2004-20220812-en
Target
f2e2e3b7ec0143f7a0c4d056eebc5c2ba9fc946b04782307a8486d14b1147af8
Size
63KB
MD5
613791a2c5a1204f9917dad4e6156e09
SHA1
5d23845470b6938cf1b4459fd66d22f68728c46c
SHA256
f2e2e3b7ec0143f7a0c4d056eebc5c2ba9fc946b04782307a8486d14b1147af8
SHA512
b4ad0997333fb6248a6bb2f462c5c58691ecaacd8021b63c15560259caca9d861cea4e9fed98ade11d9144e6c5696e3f69bc30206d31a8fc93894f8a59f76e7a
SSDEEP
768:R73xlB/LOtoitF0iz4Ym9UfKg1+Iz81Bdy3r+6FQBEn1KG64M4YkvF40YxNFZ9nZ:R75UF+btdyiIF6kvGBNFZM4TMMYIJ7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ