CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cbda0d92db8802f39a4c6b3f7b54774303bf0580ed5d68da4afb2e97c762b5a6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cbda0d92db8802f39a4c6b3f7b54774303bf0580ed5d68da4afb2e97c762b5a6.dll
Resource
win10v2004-20220812-en
Target
cbda0d92db8802f39a4c6b3f7b54774303bf0580ed5d68da4afb2e97c762b5a6
Size
50KB
MD5
4d110f3b8c3fa98711abe8ede2fe2647
SHA1
cdd37ee9cded0b76d9b0ece0e459d1f88541d3c1
SHA256
cbda0d92db8802f39a4c6b3f7b54774303bf0580ed5d68da4afb2e97c762b5a6
SHA512
1d46a43627b6a64a80d9694f6edefced7c19f678d62dd4a2dd5acae1b2b6ae6b9e15024a5b93ad453086075d1881ce79dc6192ca1bc2c044eba71512bc50307b
SSDEEP
768:n2W5cWMGXUJOrxEtuOFzOQyd11fTHhoO07yVNq5a9Puj5HtdmvOwfuJU9yH+uvK:2ndGXpcfo51hoZyogsHtdmWwNoi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ