CancelDll
LoadDll
Behavioral task
behavioral1
Sample
400a3b74f13cc49da3f5e4060e003706fe1e147996b816cff71e24a5940c9f1a.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
400a3b74f13cc49da3f5e4060e003706fe1e147996b816cff71e24a5940c9f1a.dll
Resource
win10v2004-20220812-en
Target
400a3b74f13cc49da3f5e4060e003706fe1e147996b816cff71e24a5940c9f1a
Size
55KB
MD5
91bbbbb32a25d59d7b74cc4fd947ef63
SHA1
7ed0dc447ccfa7d82d710bbe3c3636da05c434b0
SHA256
400a3b74f13cc49da3f5e4060e003706fe1e147996b816cff71e24a5940c9f1a
SHA512
352ed5a90913a7e5d41cc65a78d6b82a1e0e5bb170645ba1336ec275e3dce838c63dab9f64171e77ee09fdd5f5e0c9c23e2c48e9448adb9c1a69800d6eb59c37
SSDEEP
1536:wAceoINVALYFoJ0GE21hqgEa6+Wh1BvmYan3lu:wAcTqG7G2rQ+a7W3lu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ