CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2c5f3a6a8e2bd80a26f6e83c65f2c7784d82b099a79f641b13f63a8651e1967b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2c5f3a6a8e2bd80a26f6e83c65f2c7784d82b099a79f641b13f63a8651e1967b.dll
Resource
win10v2004-20220812-en
Target
2c5f3a6a8e2bd80a26f6e83c65f2c7784d82b099a79f641b13f63a8651e1967b
Size
74KB
MD5
837e25e584b35a113139e98c3e6835c8
SHA1
9c1c1e6cf93ddf7a88af66be0b54c0ac22007599
SHA256
2c5f3a6a8e2bd80a26f6e83c65f2c7784d82b099a79f641b13f63a8651e1967b
SHA512
d8f402653f3e6688323922130d052d007814bab3686fd743c1e48fd879d4ce6a7c15946534f07f0cb702002a54c33dabc4119e1a89771716004529db868e0575
SSDEEP
1536:6RTVb7BmQ5RHpn//FCwhHZZy5Ix9S4ON/74PcyZQh:6TsA/3FZZAGx848j4PEh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ