CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cf3a29f7686c5c5e4f34602b3ad09a089450aeb42ee392be888dff21930b9f6f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf3a29f7686c5c5e4f34602b3ad09a089450aeb42ee392be888dff21930b9f6f.dll
Resource
win10v2004-20220901-en
Target
cf3a29f7686c5c5e4f34602b3ad09a089450aeb42ee392be888dff21930b9f6f
Size
63KB
MD5
901664502b35e39fb80e7c48503e1e4b
SHA1
87503cba76389ed63325779dded931a47034c050
SHA256
cf3a29f7686c5c5e4f34602b3ad09a089450aeb42ee392be888dff21930b9f6f
SHA512
d2d4a73f4b0f054826531e564174cc42753272a3f52ca958bfd6a2c89847feb554f7c6d5ccbe0d5d260bc4b46e7929d340b8cce7078c1ac5027368be7fae39a0
SSDEEP
768:5yoCleo/ZrTvvLYHd/kOFRu80YQLPDkVUY12WHTGNF55oo2jydCs5Ogmug3sPahn:5yoC1RP2Puyn11SzTJ5Hmj3EsE5n03z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ