CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ccdb7b27d5649711f6663e9fbe9e7cd90566f43384f9475ea8848b74b1f4408e.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ccdb7b27d5649711f6663e9fbe9e7cd90566f43384f9475ea8848b74b1f4408e.dll
Resource
win10v2004-20220812-en
Target
ccdb7b27d5649711f6663e9fbe9e7cd90566f43384f9475ea8848b74b1f4408e
Size
58KB
MD5
a1b71feb7baa6686f93ee0ae987cce4a
SHA1
79f9154959a5375ae541395117215c6a4e69feb2
SHA256
ccdb7b27d5649711f6663e9fbe9e7cd90566f43384f9475ea8848b74b1f4408e
SHA512
47d07d6f90aea6158ce076ecd09bb377aaa9407c552e18884ef04b412187013062bb8ad11805060bff6a8fd3051d2dc7c825ae0660d45898d63c08657c56360b
SSDEEP
1536:VOzB/iUUdUHWQ9ahqfgnmcZgOgCyG/08GDKCe/aRRW0mlDIBg:VK/ijdsfgmqgOgSpasjDEg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ