CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6d5fc2842528168bf4b2b85858833d5f658d8d2e4bce5cb2ef43e7e3dd39941e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d5fc2842528168bf4b2b85858833d5f658d8d2e4bce5cb2ef43e7e3dd39941e.dll
Resource
win10v2004-20220812-en
Target
6d5fc2842528168bf4b2b85858833d5f658d8d2e4bce5cb2ef43e7e3dd39941e
Size
14KB
MD5
41b5d135a45e6de76f8ff3784d2490d9
SHA1
ce70302a27274ccf24a3d2f2a10a436d7c59c320
SHA256
6d5fc2842528168bf4b2b85858833d5f658d8d2e4bce5cb2ef43e7e3dd39941e
SHA512
4596803e44d9c6a522efc88a1634862c1db58dc509845db8163d2d8855cd450fa14e1fe036a6baf4ef71a34f5756e935b1f9f46dd1c5cb30ae289f7d3bf638d4
SSDEEP
384:hCkmh/u6O0VL6eXxXOWsHCV9nxYUjn+eAq:Z6ygXOWsiV9xjn1A
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ