CancelDll
LoadDll
Behavioral task
behavioral1
Sample
abe5c4cc254e32f35ba02e6972b7d64e94ad61dfcdfb3ad4c8e1d102c6601ca9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
abe5c4cc254e32f35ba02e6972b7d64e94ad61dfcdfb3ad4c8e1d102c6601ca9.dll
Resource
win10v2004-20220812-en
Target
abe5c4cc254e32f35ba02e6972b7d64e94ad61dfcdfb3ad4c8e1d102c6601ca9
Size
66KB
MD5
11ee401bd61ddc8d226432e8104ea668
SHA1
71f89c693a483da47ad581cef5e38ce22c60b1cc
SHA256
abe5c4cc254e32f35ba02e6972b7d64e94ad61dfcdfb3ad4c8e1d102c6601ca9
SHA512
cdf7aeec25f4dcc5352a231ae905e965385d41040d8d5a69b6da59ec8df3713dcd6517c519f0084fcd63428bb4a5e9b5741e3859fb2cb45ff9f27dc3eac2b462
SSDEEP
1536:IykzkagW3Kphfd1Zd3oxNV3uTOa2JNeRl1G+2GaJA:IFzkatK/d17oxP3QpWeRGCaC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ