CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2348e11f689af36c6f57f993129015dcb440d408f3cc25d3f69679579ab0fccb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2348e11f689af36c6f57f993129015dcb440d408f3cc25d3f69679579ab0fccb.dll
Resource
win10v2004-20220901-en
Target
2348e11f689af36c6f57f993129015dcb440d408f3cc25d3f69679579ab0fccb
Size
74KB
MD5
0a0044c9f2ed678248fc1ca9017bd4b0
SHA1
fe72313865468f9a0493e21cd04b409d14602362
SHA256
2348e11f689af36c6f57f993129015dcb440d408f3cc25d3f69679579ab0fccb
SHA512
f8d7ace457c5edadf2aa82c37bdee8a4412c5ef1cb36d488b082c34c41354c8955a89914cd7564beb2141226e1e6b8abc978b333cb80e2ce3652f157e90c2595
SSDEEP
1536:Hk9ILKM/vDv0ATpW8zsniVQLtUn5wpUrFZ2Ih92WNgZP:Hk9ImMnDv0OW8Y/tUsUrFZ2YVg5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ