CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a9b7de5057bf2de4629516b0e5aa4e9266066db904094af7a465e520221bfa8c.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a9b7de5057bf2de4629516b0e5aa4e9266066db904094af7a465e520221bfa8c.dll
Resource
win10v2004-20220812-en
Target
a9b7de5057bf2de4629516b0e5aa4e9266066db904094af7a465e520221bfa8c
Size
66KB
MD5
842d705428b1f15ca5b16b7c3c12980f
SHA1
5f4b8984d5026a89bb5653d58b185c4757f97085
SHA256
a9b7de5057bf2de4629516b0e5aa4e9266066db904094af7a465e520221bfa8c
SHA512
18932344ae724013cf19dcb39300435fd9ee812e6aa3b7f291674c418c30414a50eb83caa134e5e8e786a32570d29ecb9e4c3bc943d24331e032666ac7501d98
SSDEEP
1536:CjAO15+q5gvAVufVmH77kQp3UhY2RNSk3uoRbyy9t:CjAO+gdVutmb779UhY2TxnRbyy9t
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ