CancelDll
LoadDll
Behavioral task
behavioral1
Sample
38c66b469f33ba050d4d819e6948b7e4bd49736e8f41e0344bc9ff47d3aa87ca.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38c66b469f33ba050d4d819e6948b7e4bd49736e8f41e0344bc9ff47d3aa87ca.dll
Resource
win10v2004-20220812-en
Target
38c66b469f33ba050d4d819e6948b7e4bd49736e8f41e0344bc9ff47d3aa87ca
Size
58KB
MD5
84bd7b61f5c3d64a5c3679567674e491
SHA1
3794cd0baace55f8ddb5e0f39ccfe357a93386c2
SHA256
38c66b469f33ba050d4d819e6948b7e4bd49736e8f41e0344bc9ff47d3aa87ca
SHA512
b7e968a2e7bd87e20c24756029791090191cbf826f17bb6347c1a8a902ed7b4b220b53e028ff96276e8616d51a1145503b0394a9712276042826454443fb6f46
SSDEEP
768:SUs6x6tc/TnBgIONs0yQALwWxA97xbKyfxfIpBOl+SyTuALlePNHfkLgEhbPtR/Q:n56EgIIewN97xZWgXAclH6hbH/LqsEz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ