CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b056696085373c8e5336a1926a6b3eca48ed94ae1fb0c8758bf6771d511dd597.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b056696085373c8e5336a1926a6b3eca48ed94ae1fb0c8758bf6771d511dd597.dll
Resource
win10v2004-20220812-en
Target
b056696085373c8e5336a1926a6b3eca48ed94ae1fb0c8758bf6771d511dd597
Size
56KB
MD5
83f58b0e182cb29d6b554d430b2b3850
SHA1
9e88e0bf08459d649d4be422df7fb6d558e93ed5
SHA256
b056696085373c8e5336a1926a6b3eca48ed94ae1fb0c8758bf6771d511dd597
SHA512
36a05c68b2ada8589e65da80d20eea60461451e01ce140e91e42909d7779e7124ceebe1143a89733595a31a63860ccc62de0fc90fc45e839398846c5f7f53250
SSDEEP
768:pgX8C8CPtL9oZsLOuT8iLXwbnd9gnNQZ4uhcwVChy8KRnxJB1Nzkam44vUex4kOZ:68C3PjhLO1fbd+nNQZ4rs8KdBuNvUy4r
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ