CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bb8c2309b5393b88f03827ce4d37ebc94c85932dd392c5a2d570190766999979.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb8c2309b5393b88f03827ce4d37ebc94c85932dd392c5a2d570190766999979.dll
Resource
win10v2004-20220812-en
Target
bb8c2309b5393b88f03827ce4d37ebc94c85932dd392c5a2d570190766999979
Size
64KB
MD5
1cacfba06034a6a19209aaadd99c8818
SHA1
d82a317f6528122b57e6565a232044a242ecdac7
SHA256
bb8c2309b5393b88f03827ce4d37ebc94c85932dd392c5a2d570190766999979
SHA512
10f0b266b51731889bf3c4ac76d8045dc626ead0583a5f92ecb6a8b419591e3a632703a8a39c8726fbce42671f90b3fdaade01a97976af14a1cd70549402ead0
SSDEEP
768:6RHUspVJVPw7Fjfma0FeSpe95IF7bbm0er7DZLjU9hiKBfoZv5Wse8Z4A/o7s3gJ:6RTVcX+aIK047NjU9h7W6W/VGT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ