CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c77b232102289a2a9e1951a80ea8969b6ace8a3bf25f162a0c3a22a5b8907cd0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c77b232102289a2a9e1951a80ea8969b6ace8a3bf25f162a0c3a22a5b8907cd0.dll
Resource
win10v2004-20220812-en
Target
c77b232102289a2a9e1951a80ea8969b6ace8a3bf25f162a0c3a22a5b8907cd0
Size
68KB
MD5
5eb159c10b9e37426afd41998a5e1a7c
SHA1
fa1543a492cdb527d66c2f136449f06c3f49e60f
SHA256
c77b232102289a2a9e1951a80ea8969b6ace8a3bf25f162a0c3a22a5b8907cd0
SHA512
27dc0a89c0ea85284af8cca09974b83fa8f86d3c7c466a70efe151ccfb7258ae262f0e18fd98f87e9a5c45ece0bddb8989b1cef93dc6f30d73b1f56a6cdadec4
SSDEEP
1536:R758l5/bmHjq6feYzTNiPVIicRUPEHCDXdoOExS4YXRhC:R7583/4GUTmYUPvXdoRRYXq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ