CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d5ce3f166249abd539c58f801adda4b96860f0cdca7784aa70eed4e19e31e560.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d5ce3f166249abd539c58f801adda4b96860f0cdca7784aa70eed4e19e31e560.dll
Resource
win10v2004-20220812-en
Target
d5ce3f166249abd539c58f801adda4b96860f0cdca7784aa70eed4e19e31e560
Size
79KB
MD5
0b9f9d69b7acf378b77fe4567684f7b1
SHA1
6c37683210feb0f98356c17a325b02e327b917c7
SHA256
d5ce3f166249abd539c58f801adda4b96860f0cdca7784aa70eed4e19e31e560
SHA512
1101b3406994e2a0f4991380020d7f2b97707cdd2dc09b0e2d0dc6d71c9946c45bf1c0e653d3e5b09b1e9e88f6f71c1abae3a73aad761dd5e621a6a1d07873a1
SSDEEP
1536:KCGdyjz9N7bUhJpIg/3ZTNaary0TIaMXM2ogtLjDTGhJjd:YgRN7AhPz/3ZTNaeQOA7TUjd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ