CancelDll
LoadDll
Behavioral task
behavioral1
Sample
34ff53721d9a9fc9f1131ffe5fdef671c920cc02aa2577aded5ba5254675d6eb.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
34ff53721d9a9fc9f1131ffe5fdef671c920cc02aa2577aded5ba5254675d6eb.dll
Resource
win10v2004-20220812-en
Target
34ff53721d9a9fc9f1131ffe5fdef671c920cc02aa2577aded5ba5254675d6eb
Size
71KB
MD5
a1dbd4728e32aed384af83ce2912b419
SHA1
c223b4ea2483097c9b692750fe8a1c53dbc3e69a
SHA256
34ff53721d9a9fc9f1131ffe5fdef671c920cc02aa2577aded5ba5254675d6eb
SHA512
71e6c799363305c8b0e7e2decb94d2aad59e8ce59b160d8d88123a99f0b2d2e2829ba0fe06f120a310ea6fd0bb7fdcac0c063dc5801798de7f59e60a4d66cd55
SSDEEP
1536:grl1KpEMXn0rof1b/SCIH0kYrE+fYpbbN6JEJ6xJjJ7WzH:grlpy0kf1b6CIUrrpfYtRuEJ6xJtWzH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ