CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dab12221c6949e0e1b9e9b00d51f2995ced59ae3d8139c84bfabb1e988e05314.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dab12221c6949e0e1b9e9b00d51f2995ced59ae3d8139c84bfabb1e988e05314.dll
Resource
win10v2004-20220812-en
Target
dab12221c6949e0e1b9e9b00d51f2995ced59ae3d8139c84bfabb1e988e05314
Size
62KB
MD5
a0a38b747d0df936764eef0f46403e1f
SHA1
4568a37fdf25baa92c40d3ac421f1aed63fce742
SHA256
dab12221c6949e0e1b9e9b00d51f2995ced59ae3d8139c84bfabb1e988e05314
SHA512
63e1a2b20c6a95fe967ff63ce07922de321dc0597410f5fd12df9644c8b791ae436c08d3ff9cdd8f28ca3c815deba66e01b310c4552d2c2b92a41fdfe8cd65d1
SSDEEP
1536:MicF5wd9/5K7fNIV6r/jV0cYLF3qp069Ri0kg:EC35K7fO6rbV0cYLF3A069R7kg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ