CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3ab474b91ea2b373c2e6e3f94b4708812a67242da02c4d0db74ff9f30d06222d.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3ab474b91ea2b373c2e6e3f94b4708812a67242da02c4d0db74ff9f30d06222d.dll
Resource
win10v2004-20220812-en
Target
3ab474b91ea2b373c2e6e3f94b4708812a67242da02c4d0db74ff9f30d06222d
Size
71KB
MD5
2015227b6ed5952249ec9ed253bc5ef0
SHA1
30f82332cdd24bd787ca26de667a645f85085d13
SHA256
3ab474b91ea2b373c2e6e3f94b4708812a67242da02c4d0db74ff9f30d06222d
SHA512
198bd76cc5e180a2a8e9f8c9d3004eb4ada863a77fc49d639df9b53f16ebbd3443b74fab949d3a7c10b8a978a8c0d14d1523580247df3fb979e654a6ae393cac
SSDEEP
1536:lTD+K/8sPzCyThE0KTnouaEQCDayl0VPp3SS0o/DuajVfLq0:l/tksPzCyTh8kgqHVPJL0o/yAx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ