CancelDll
LoadDll
Behavioral task
behavioral1
Sample
545ffd0d00a9deef9f1e43884feae4989f9d9259cb09ea502bec5eb956f9fb33.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
545ffd0d00a9deef9f1e43884feae4989f9d9259cb09ea502bec5eb956f9fb33.dll
Resource
win10v2004-20220812-en
Target
545ffd0d00a9deef9f1e43884feae4989f9d9259cb09ea502bec5eb956f9fb33
Size
58KB
MD5
90aa77026a7139a9f1d4a800766539b4
SHA1
2ab451e7e5038f4c7baf42d47c6aca99437cd32a
SHA256
545ffd0d00a9deef9f1e43884feae4989f9d9259cb09ea502bec5eb956f9fb33
SHA512
3ba3c35d6718cfe60c631935032ed18d8ea1f15d702e8eeb3893a052c0d2cbc77384b8f9e8603ce92d72d36c11d9565f02be8e6476335be3eac27eba8e7c54f8
SSDEEP
1536:dQ76ypVpI2F0rwJCXieaXJugOYp/AZbun+zybfH:S75VCG0rnXXa7qun7bfH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ