CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6eff36a935f3387ba72f1a508102b62bb48bc8793f78fe37fa6473e6aa24e84a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6eff36a935f3387ba72f1a508102b62bb48bc8793f78fe37fa6473e6aa24e84a.dll
Resource
win10v2004-20220812-en
Target
6eff36a935f3387ba72f1a508102b62bb48bc8793f78fe37fa6473e6aa24e84a
Size
62KB
MD5
a2f61794b54df25330e69caf65de14e7
SHA1
41dedced475d51c43017ee80f088031b001b2b91
SHA256
6eff36a935f3387ba72f1a508102b62bb48bc8793f78fe37fa6473e6aa24e84a
SHA512
ceb82a27546c8ef54450e91a9cb006110ec3531942849eb369ffbb1843c4ff3648291ba5dd3411c31a52f0cb3c4d45793f1363fd62e7518838e1f06f18662b48
SSDEEP
1536:jjmxLPyZmG6sq1JnZiK6UAE0fWkQcPx2a2:exLPyZrq1JYIkQ1a2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ