CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eecdbaf81191fd00094445dd9c6f32024ac4d0476565d1b25f33a30eb25cb747.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eecdbaf81191fd00094445dd9c6f32024ac4d0476565d1b25f33a30eb25cb747.dll
Resource
win10v2004-20220812-en
Target
eecdbaf81191fd00094445dd9c6f32024ac4d0476565d1b25f33a30eb25cb747
Size
76KB
MD5
81d6863694feddf7dddd0f072a853571
SHA1
acad91120aec75ab45a15411e2acd160bb4d6f78
SHA256
eecdbaf81191fd00094445dd9c6f32024ac4d0476565d1b25f33a30eb25cb747
SHA512
4e66b77d67b6da1b40e41a7f272a715fc62348b8ca027e52cd114db02b383354adbf77b7e932e8494c7484b5540b87b7efca6574b05fe385a45a0fb7f900a617
SSDEEP
1536:NomNZnI+CQSrNdia2gh+2J7uIMn7IP5r/gGBduIkMyd/dHQ+RGvV6:NooC+C5ilDqusv61
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ