CancelDll
LoadDll
Behavioral task
behavioral1
Sample
927136f5ef31da9e4f42f9b79a78ab4b2314c3c9cc6f7fecc59fbb00025af139.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
927136f5ef31da9e4f42f9b79a78ab4b2314c3c9cc6f7fecc59fbb00025af139.dll
Resource
win10v2004-20220812-en
Target
927136f5ef31da9e4f42f9b79a78ab4b2314c3c9cc6f7fecc59fbb00025af139
Size
69KB
MD5
8225aa74f951a6990f14831feca63bee
SHA1
7b2c969abea0bddc0ed63547f1694feb1fadf62f
SHA256
927136f5ef31da9e4f42f9b79a78ab4b2314c3c9cc6f7fecc59fbb00025af139
SHA512
4357b626b2fec7f49703f861a62123105a828daee5b8024d3684b3748b75ae268a13b085aa552020efdb6eb9f1e89f8a32f5bf7a53f77731675a4eee0878a116
SSDEEP
1536:IykzkagGRUuag0nK1KV9AvlFnPl0xCnor1ySBPRS0:IFzkajRU7NnK8HAvlFPllor8yPo0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ