CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d12209c3df3267993d079aeafb48a915ba60289271743d9eef4fb7d1e09959bf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d12209c3df3267993d079aeafb48a915ba60289271743d9eef4fb7d1e09959bf.dll
Resource
win10v2004-20220812-en
Target
d12209c3df3267993d079aeafb48a915ba60289271743d9eef4fb7d1e09959bf
Size
58KB
MD5
a09edaa4bef14ce585b4221c05b9a0dd
SHA1
83f7dbe4ffd1435609d4b2ca3094f3f0f8cdc02d
SHA256
d12209c3df3267993d079aeafb48a915ba60289271743d9eef4fb7d1e09959bf
SHA512
12140616ca35753555b8c16f927f034588a26ca2fd5276909b71fe011bd9dbd5d2f62d9c004e5f17e6d6d121f6390e4dee4b8824309b350a0f8b40b875cfa4c3
SSDEEP
1536:jPe+sq3+tEy2RjLz/jRw6JnfUXlTSO5hR:C+sq3+tENjy6JnspDR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ