CancelDll
LoadDll
Behavioral task
behavioral1
Sample
46dd1b7cad4ac271030ac31fae6b4a839a2940460fdadaa3a00f55ecaa41544a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46dd1b7cad4ac271030ac31fae6b4a839a2940460fdadaa3a00f55ecaa41544a.dll
Resource
win10v2004-20220901-en
Target
46dd1b7cad4ac271030ac31fae6b4a839a2940460fdadaa3a00f55ecaa41544a
Size
62KB
MD5
7c6baef194126f1277d9062b6fdeb118
SHA1
f8a32e1deadf39b9e2703cd2d87424fb81de6c4a
SHA256
46dd1b7cad4ac271030ac31fae6b4a839a2940460fdadaa3a00f55ecaa41544a
SHA512
9594e722a71266e9ca9284208d29d3c51f56d0324a6405765d896a4ed8fc7c0b406654e647cca49529e09560558b9e5ebe5b94fca56796ef9de464db2c27c7ae
SSDEEP
1536:DVV1HTzYDb/TmvXsfhnK+YnC9TRERbgWCfHuJt4OJpFIqo:DVrPQ/SvXsfhnK+YC9TE0XGJFFIqo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ