CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4e559e1c31f50d7d3d603b98cc6f6a5a36af4d91c77bcaf69992569b6954c286.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4e559e1c31f50d7d3d603b98cc6f6a5a36af4d91c77bcaf69992569b6954c286.dll
Resource
win10v2004-20220812-en
Target
4e559e1c31f50d7d3d603b98cc6f6a5a36af4d91c77bcaf69992569b6954c286
Size
70KB
MD5
3a1474ae45cef9a3b978c18373b8ad80
SHA1
58085cc599b2b434628a15308471c1c5977bba2f
SHA256
4e559e1c31f50d7d3d603b98cc6f6a5a36af4d91c77bcaf69992569b6954c286
SHA512
65ae3d014e6209abf38d7a972b622949f554c19a16fedcaf3d0222a40a7aeee83d3af96ab65d42f6ecaf134d1e3ad12694b368ce6bc4e1e67929914dd41a645a
SSDEEP
1536:IykzkagpRBCMxdP1nAklQY3LI6nqcGIBIZOFlLqc5OfNw+:IFzkaaXxdP1Aklj3M6q4Pt6C+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ