CancelDll
LoadDll
Behavioral task
behavioral1
Sample
293aa5898c30f7155ebbcd6f873ea65f13ee9c589aec89977f4ed306362ab6ae.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
293aa5898c30f7155ebbcd6f873ea65f13ee9c589aec89977f4ed306362ab6ae.dll
Resource
win10v2004-20220901-en
Target
293aa5898c30f7155ebbcd6f873ea65f13ee9c589aec89977f4ed306362ab6ae
Size
73KB
MD5
308ea8710608f9fcdf743c0a340fead0
SHA1
47d6c6e50492a93611f17305a32445bd77644f10
SHA256
293aa5898c30f7155ebbcd6f873ea65f13ee9c589aec89977f4ed306362ab6ae
SHA512
f02896001b0259aea104abe8b20dded44f73d6f35c0873ca77dcad8c042c22071197a977a85f631bc65493977c7f35b272d0fba0d829518fab685aeef2d2aae3
SSDEEP
1536:IykzkagxIV0JGRTNAWdqYzyX958QvIHd3U8W+qGljVo2Z+8zO:IFzkaZVGS3FzHlZoVn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ