CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0cdfb61cebcdd54e3fd0fb36d3ad6878cd1c18e603e03781b8f419561e10c530.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0cdfb61cebcdd54e3fd0fb36d3ad6878cd1c18e603e03781b8f419561e10c530.dll
Resource
win10v2004-20220901-en
Target
0cdfb61cebcdd54e3fd0fb36d3ad6878cd1c18e603e03781b8f419561e10c530
Size
73KB
MD5
915ae0b32dccac453af48e9b9d839c94
SHA1
306fc8e22e8fe6c3bcd81c243aa23e8de5ca0067
SHA256
0cdfb61cebcdd54e3fd0fb36d3ad6878cd1c18e603e03781b8f419561e10c530
SHA512
ff4be118e330454e407697d3657bb5f18f7272614fd0eff2a10a3ccc74e460d8d73b04e492bb1b228813b295a270e699efd9cbd0b8e37d0bd8578afadfdca59e
SSDEEP
1536:L8NXippO2fu3+pxeXfbMdg7mObx85YRLv2vFOGU5FLl:4Ny62m3+78Mee5w2vpUHLl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ