CancelDll
LoadDll
Behavioral task
behavioral1
Sample
80b96ae5ee07832183c69dd516ab3ea1dbb398e68276d508435113cf4e98fc30.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80b96ae5ee07832183c69dd516ab3ea1dbb398e68276d508435113cf4e98fc30.dll
Resource
win10v2004-20220901-en
Target
80b96ae5ee07832183c69dd516ab3ea1dbb398e68276d508435113cf4e98fc30
Size
65KB
MD5
a07df27bdf04f56708c3d8378268b680
SHA1
5569123c4b819cc2e51aece541b734b5e6e257e2
SHA256
80b96ae5ee07832183c69dd516ab3ea1dbb398e68276d508435113cf4e98fc30
SHA512
42c047277e6e1c7e79c8c2495bff3e48e22f1875b0534c0c59ef84666bf97127b56877c34568028a358af835e326f6a54d83fa3cfe36a23aff5af1ea23343875
SSDEEP
1536:lTESkEqKcBs8Si/lH8wW0BTJbESRTxslNHmVDrRNWRr:6SB2+i/PTJoqTxq2DrRNWRr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ