CancelDll
LoadDll
Behavioral task
behavioral1
Sample
82b3cafad5e11ef2876fda1685ed0f24e3c54aefebcacac52466c7f5723aaf7b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
82b3cafad5e11ef2876fda1685ed0f24e3c54aefebcacac52466c7f5723aaf7b.dll
Resource
win10v2004-20220812-en
Target
82b3cafad5e11ef2876fda1685ed0f24e3c54aefebcacac52466c7f5723aaf7b
Size
52KB
MD5
83ad8670fc461cd8bf5197a6b31c848a
SHA1
de603984f0b909ab13c827b8e98c7f89d5f49095
SHA256
82b3cafad5e11ef2876fda1685ed0f24e3c54aefebcacac52466c7f5723aaf7b
SHA512
6f1e02b8d62c0c1db88cf317d66b35e7223cee9c614f9bfc7121de048cc8fdb7b43b62b8438b46cacfe68c15fea76e35e9ce920d68eac6d5ed696231b429931f
SSDEEP
768:vUs6x6tc/TnBgIOgmwt1cTQXBJ6mqNPGjI4GsmUvpop3dnPxxtFq+9KjJrlpqWLi:c56EgITZVXBJ6LoGzUvU3dZx/0jJrlp2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ