CancelDll
LoadDll
Behavioral task
behavioral1
Sample
92a6c6f3f488c2ca24ad3336a0f7c60a6a69d971fab84aab1bd90b881356ecac.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92a6c6f3f488c2ca24ad3336a0f7c60a6a69d971fab84aab1bd90b881356ecac.dll
Resource
win10v2004-20220812-en
Target
92a6c6f3f488c2ca24ad3336a0f7c60a6a69d971fab84aab1bd90b881356ecac
Size
61KB
MD5
a35d38a22159739ed4f18c0579a9e1cf
SHA1
1f276eb267b3d1e21775f21e637ce9253d86b257
SHA256
92a6c6f3f488c2ca24ad3336a0f7c60a6a69d971fab84aab1bd90b881356ecac
SHA512
f2fa276c7d630ad6efd6ecca6b07792dc3e0ffe0b5ad94f25f64ac9cd663e541135aca1db56ee60ad03cb2d848f4ebe204bb01991af49e79acab163cd46beee1
SSDEEP
1536:jPetlHcW/7waoYghkIAQLlRnQYV2Cs2dD/yE61P:CtlHcK3Bg55Ll2Yx/yE65
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ