CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ff412c96b1b8dff48787e528ef13000de1cb01f9ddf6ac284ae27b087838f869.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff412c96b1b8dff48787e528ef13000de1cb01f9ddf6ac284ae27b087838f869.dll
Resource
win10v2004-20220812-en
Target
ff412c96b1b8dff48787e528ef13000de1cb01f9ddf6ac284ae27b087838f869
Size
66KB
MD5
0c576d33e838587486f1777183016c51
SHA1
f3109006f3edeb6cae6e347c4ca73bb8a0688b7f
SHA256
ff412c96b1b8dff48787e528ef13000de1cb01f9ddf6ac284ae27b087838f869
SHA512
58393c0358f6c6eaba625333ce418ff42bcfea773cc0a86df4e08f96a564ef47f54558d4d1c30a2260872b72ac9e12b835a000637864ff8893a0cc02594a46fb
SSDEEP
1536:MtGxxe/fPNOAKQZDLQhHtKWuH5rEpUD3CynE3nE/+YLXEwiGzXW+k2d:MtGxxeV2QZDLQhH8Wua6D3CynEXEmYLL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ