CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e51f2680b0ce8661b07f2a37a5ece596e843a4f71be19310ab040e251b91e3f9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e51f2680b0ce8661b07f2a37a5ece596e843a4f71be19310ab040e251b91e3f9.dll
Resource
win10v2004-20220812-en
Target
e51f2680b0ce8661b07f2a37a5ece596e843a4f71be19310ab040e251b91e3f9
Size
62KB
MD5
1341e3b455967573a566ab0088f25242
SHA1
99b920217dd78c291c89e414b0406968c89f1cf6
SHA256
e51f2680b0ce8661b07f2a37a5ece596e843a4f71be19310ab040e251b91e3f9
SHA512
8722af643306fb8e9199e9f39b3fec96d1cfdefa7bb82b3aa31a0c3b180d11502065d683f7555391bb013a511b7ed79e620da35a78acf6b638bc853ee8401ab5
SSDEEP
1536:NXflI2H+tsmPRfCGH4j6hA8gqsvP6P6sUoyEEkjZ9EET:nx8d7Yj66858PkZxsy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ