CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c21baf4956b1c59815a886bc234f592a8339f088e10d9a858cf497b35e6c96c1.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c21baf4956b1c59815a886bc234f592a8339f088e10d9a858cf497b35e6c96c1.dll
Resource
win10v2004-20220812-en
Target
c21baf4956b1c59815a886bc234f592a8339f088e10d9a858cf497b35e6c96c1
Size
57KB
MD5
718c7e338a04f034c388a7d960f5ac53
SHA1
14c92388996adad95a56418445b43ba9a8defc39
SHA256
c21baf4956b1c59815a886bc234f592a8339f088e10d9a858cf497b35e6c96c1
SHA512
cd96cff81850263eafd5d7eeb5f88ac008582ae1484d5d7ed7cc480a681735ec632e07cd3c9a38fac1ea7f28c3e31b3d2c692c1f73957e17e12f1ec43d951b06
SSDEEP
1536:lTESkEqKIreUisErIlBVAs7W+4KviYNt6kUNMQCR:6SBKreUpCcBx4aTNv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ