CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9db0865aef1e1915b4619b60fcb961ca5bc8887df7f52bf4c058f86c8e2eb4d9.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9db0865aef1e1915b4619b60fcb961ca5bc8887df7f52bf4c058f86c8e2eb4d9.dll
Resource
win10v2004-20220812-en
Target
9db0865aef1e1915b4619b60fcb961ca5bc8887df7f52bf4c058f86c8e2eb4d9
Size
53KB
MD5
7a7241c3a7adf7bedf9485a635f8c033
SHA1
5c5268156ecf50b6334c8a2811fd1cb41751629b
SHA256
9db0865aef1e1915b4619b60fcb961ca5bc8887df7f52bf4c058f86c8e2eb4d9
SHA512
a22e43905c7e7f233135c714e036c47309b5dde1d79d4cb71fa353428ae222f598ddfdba21fe7a5c73c17e4166d766d5971d9af768e5b4b080fa5ad0a153dca3
SSDEEP
768:R73xlB/LOtoid/NAaAYRTYlzwmPh9w6WPEgxw3gMko+ClyE71NPLuMcLlWis:R75Y/NA7YRfw9lotg+ClyEmWis
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ