CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ecf2a936c900bb00aff7366eacca4fc4eee8cfe62c5c7a76c6043397bfa782e7.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ecf2a936c900bb00aff7366eacca4fc4eee8cfe62c5c7a76c6043397bfa782e7.dll
Resource
win10v2004-20220812-en
Target
ecf2a936c900bb00aff7366eacca4fc4eee8cfe62c5c7a76c6043397bfa782e7
Size
70KB
MD5
5afdb384336fcf2a723155570c591d00
SHA1
6d6b57d475e0a7f1611a81d02b3302950af6c026
SHA256
ecf2a936c900bb00aff7366eacca4fc4eee8cfe62c5c7a76c6043397bfa782e7
SHA512
1e85153e60d6dc1e83b552de275f18d6515e9dd1a97174646c327d8976e02fc754e74ce390c90e9e5c11969ea9badf5ec8b365b845214707d02217e4ed984a21
SSDEEP
1536:lLTer/00I3Al4ybNrLacW/fcdRGOITUFe8CL9Z8UGLCzonN/N:FTeoT3AZZLZWROITJ8Cnvzi/N
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ