CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bd5908c2d5a16a9843ee33e1914937e922aff435f41eaf2e6f7102412e26ca78.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bd5908c2d5a16a9843ee33e1914937e922aff435f41eaf2e6f7102412e26ca78.dll
Resource
win10v2004-20220812-en
Target
bd5908c2d5a16a9843ee33e1914937e922aff435f41eaf2e6f7102412e26ca78
Size
69KB
MD5
937b3bb2c8e908239d69f93b8aff063b
SHA1
af2bcab3ee50bef7a1222ba035a6a6197aa43410
SHA256
bd5908c2d5a16a9843ee33e1914937e922aff435f41eaf2e6f7102412e26ca78
SHA512
ff360c48d5788d7e1bbdbb0f0299e88f3d3865cc0980875bf2991b6a28342251e17370f11fc8203b5a7d1b18cfdfa65fbb8728f7d38cd968b3fb89f49685934f
SSDEEP
1536:V7LV29Z+qXhMcZs4o6nlAf+fre7dnhuf9dqhVsKhLsVZ2W185wdXg:FU9Z+CZsfilAuroOfehVsvxG5OXg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ