CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6a0f65a31e22389bea1eb22fc49535de24bff2e522214b4861befaf7f0e1c018.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6a0f65a31e22389bea1eb22fc49535de24bff2e522214b4861befaf7f0e1c018.dll
Resource
win10v2004-20220812-en
Target
6a0f65a31e22389bea1eb22fc49535de24bff2e522214b4861befaf7f0e1c018
Size
61KB
MD5
96249928eb90db75f49cb1632609240c
SHA1
55f941731c3b98777635f4f36fd32dde97a66d66
SHA256
6a0f65a31e22389bea1eb22fc49535de24bff2e522214b4861befaf7f0e1c018
SHA512
a78b9d9d9ee7369cd1c40f0d134d7e5f73b43ec4c18cb0b01caf746bd1d1be6af3ae86fee468c5810e005ded2beea6cdbfc2c12c06ebfbd12468148d73e54775
SSDEEP
1536:C8C3Q/BakoC7hxJUOxRystrhKzH//HSoI3HQQ:C8AQBoohzUmIHL/g3HR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ