CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bb6beae10ea84f68e5b4a96d682134c53a7a745176d51e0d73c24d20641585d1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb6beae10ea84f68e5b4a96d682134c53a7a745176d51e0d73c24d20641585d1.dll
Resource
win10v2004-20220901-en
Target
bb6beae10ea84f68e5b4a96d682134c53a7a745176d51e0d73c24d20641585d1
Size
48KB
MD5
938dd46d7cafffd5af1c88d89434a71b
SHA1
6bd23b5313d537e8656dec090bbd924a40185722
SHA256
bb6beae10ea84f68e5b4a96d682134c53a7a745176d51e0d73c24d20641585d1
SHA512
fe2693b57ec0028c39f947563a96a235f528cd698ee9bbd835726f702dc73c33456e30166657dfc8dd917e32940e713d234e3156b3cd6380679ea5628eb448b5
SSDEEP
1536:OsuX6JN2YxaoRohIe8Sc8ojCgwf3GRHyo0u:1/b2YIf8Sc8ojTwfGEu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ