CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7fdc313c0a301c41b3f116da13f55e8b859fe479544e8554ab8f2231da1d8d0b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7fdc313c0a301c41b3f116da13f55e8b859fe479544e8554ab8f2231da1d8d0b.dll
Resource
win10v2004-20220901-en
Target
7fdc313c0a301c41b3f116da13f55e8b859fe479544e8554ab8f2231da1d8d0b
Size
66KB
MD5
0b601adbf55d2747fe902c9596c62f33
SHA1
a524d926097a6135dcf7f5da129dae2ded736d05
SHA256
7fdc313c0a301c41b3f116da13f55e8b859fe479544e8554ab8f2231da1d8d0b
SHA512
63f37b6e1acd67348e3bb7c2e946dde9a2cd72a7724bcd24f50f7d01e1f1b9160006cc72a56a934ae68466f52994d26a429142e1049f2d29fcee29e7424a0eca
SSDEEP
1536:2ndGX3t1KS1Q6HzyzUH6vq4k7aJXv0lDiqncq5GPNK+:2G3t3TyzL1k7aJXv0JckINf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ