CancelDll
LoadDll
Behavioral task
behavioral1
Sample
38e5fad4c73c35474a941f87f349926706b5c3661d4327bc6fc8251a05d9f71d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38e5fad4c73c35474a941f87f349926706b5c3661d4327bc6fc8251a05d9f71d.dll
Resource
win10v2004-20220901-en
Target
38e5fad4c73c35474a941f87f349926706b5c3661d4327bc6fc8251a05d9f71d
Size
54KB
MD5
828dcbb8eb2df21be7145f422ba12aab
SHA1
000cb2911791775314ecba9a1d5363fde0c471ef
SHA256
38e5fad4c73c35474a941f87f349926706b5c3661d4327bc6fc8251a05d9f71d
SHA512
45e5ba39f79c6439bf55fd633fe08c1603e3c551ce5ce536b61f9f74f7426e415d20ec79810c5496c8088c1924f782e913a427775c2cdc629559adfa2389baca
SSDEEP
768:vxX2BcS1lyuY9zsxwMOJN5FFtIigdaGwJuCf22esxRewzO8DfbTUtHjgE/dk43Cc:vxKNIuYiwbvX0ouprkewzO8TbS1fp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ