CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fd08d16720922524b6febf3b2f7fddc1dbe37ed56c839b61d66e7ad7ac5da7f8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fd08d16720922524b6febf3b2f7fddc1dbe37ed56c839b61d66e7ad7ac5da7f8.dll
Resource
win10v2004-20220901-en
Target
fd08d16720922524b6febf3b2f7fddc1dbe37ed56c839b61d66e7ad7ac5da7f8
Size
50KB
MD5
80517b34e85b786a6363bd46988af9af
SHA1
5812baf08e6e67b0266deb6573b8684916838855
SHA256
fd08d16720922524b6febf3b2f7fddc1dbe37ed56c839b61d66e7ad7ac5da7f8
SHA512
4771be461a97b12f7d376bc3d6ce1bf3e0cf051a17552428193b216ab205465048648ff0c0a99e2ee71b01fc43afbbbd7091f34fd8a2ae866acf5d3cedd08dcb
SSDEEP
768:e+TO5SxTOEq/CRjZwILh3xi2QPDKtSWW8MYf+UdLqEv4F9G+w0biirgB4pU:lTESkEqKkILh3WmtSEMYf+wU3KgU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ