CancelDll
LoadDll
Behavioral task
behavioral1
Sample
af45370d27b4a220afbf9691e446911f44eb003012c4fcd83f8be3b780ee02dc.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
af45370d27b4a220afbf9691e446911f44eb003012c4fcd83f8be3b780ee02dc.dll
Resource
win10v2004-20220812-en
Target
af45370d27b4a220afbf9691e446911f44eb003012c4fcd83f8be3b780ee02dc
Size
66KB
MD5
1e384c3cecd93b3850facbb62f8dabe0
SHA1
6815b13e70652d45ff1fd699a093203e2a12f514
SHA256
af45370d27b4a220afbf9691e446911f44eb003012c4fcd83f8be3b780ee02dc
SHA512
49111bbb15190ff2983684447e484a2eb02121288e3ad878a0022c8c34b3f9b7cf45657ae5801b198cd7933045ab3e45642cc7db9b6eafb3070f00aba576097e
SSDEEP
1536:+gK4oX3tQsaaJNnYYS1upayvDSvsXyHufpcLmb:i4CDv7DciDSvsRpcLmb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ