CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b9e548e50e52438ff55a3cede9946e7c09a89dd3ddd036ec9d558cb3f4ad8621.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9e548e50e52438ff55a3cede9946e7c09a89dd3ddd036ec9d558cb3f4ad8621.dll
Resource
win10v2004-20220812-en
Target
b9e548e50e52438ff55a3cede9946e7c09a89dd3ddd036ec9d558cb3f4ad8621
Size
57KB
MD5
92612ab83ca81f5e83bfdf11361c0f2c
SHA1
08dc1825f3c7aea439528ac253964615a98cb1d6
SHA256
b9e548e50e52438ff55a3cede9946e7c09a89dd3ddd036ec9d558cb3f4ad8621
SHA512
998bb0a775c6d6cd84abafee1e74178e7b67850cd3375265a5c68b433864b85a83ffa0d40d6d1b74412477c90e8a3e0576222d875dd8415903c2e9cac69ff716
SSDEEP
768:IykIwePd8g7dHBBEGcTsuuT4Mgq7JvhG3q/dO90VfFgTJdknPB7YjDzdheIQ:IykzkagrFIIzD73eKdO90VtKoPBaRQIQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ