CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d6fed72bf79aa3b1260077890af6e46a8b88f6e37a2e45c67a579edcdc24ac5b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6fed72bf79aa3b1260077890af6e46a8b88f6e37a2e45c67a579edcdc24ac5b.dll
Resource
win10v2004-20220901-en
Target
d6fed72bf79aa3b1260077890af6e46a8b88f6e37a2e45c67a579edcdc24ac5b
Size
62KB
MD5
0ff37379bc48b960a16f9577e534ba53
SHA1
f286c0908d7dbfbfaaf1ec2652d07ece93655b92
SHA256
d6fed72bf79aa3b1260077890af6e46a8b88f6e37a2e45c67a579edcdc24ac5b
SHA512
1f9cf2df58066625725f0e86b392789d7678693877a39541a8027b556a88718c53417c783aaa432dd687c9161025cebda5ca56c4b2d92b624c0d6fda938bdb2f
SSDEEP
1536:knK0jhOKw+gud6fngB41mqrJ6Y3jIg8eZ7EGeReKCn2r:knNhOKw+lMngB41mcsYTIw7EGe8KCn2r
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ