CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1eaa6bf1ef873c9d62c8a069ac25523a99bc0f6a4791f292c0c2e47fc1f1a4f1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1eaa6bf1ef873c9d62c8a069ac25523a99bc0f6a4791f292c0c2e47fc1f1a4f1.dll
Resource
win10v2004-20220812-en
Target
1eaa6bf1ef873c9d62c8a069ac25523a99bc0f6a4791f292c0c2e47fc1f1a4f1
Size
44KB
MD5
5cf9346d1a56baefbb631ddcf8813c99
SHA1
737518a43032f5c788e20a79de5722bee9bccc2d
SHA256
1eaa6bf1ef873c9d62c8a069ac25523a99bc0f6a4791f292c0c2e47fc1f1a4f1
SHA512
d8c2edfcdfd14c28dbd081864df3593489bb29ddd9a85a98ac94c45f42418c43a44fe2c17dddf1de6a4a03ba23043a5fb13b3d9ea0ad86ef93ad787cb300a4cc
SSDEEP
768:CjAhk8UbN/5heBOV1anQ6nZohtwyfPyQACYbidzxWRB1w0gfNvIF:CjAO15+Ic3ZohtpPybCYmd9WRbgFvU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ