CancelDll
LoadDll
Behavioral task
behavioral1
Sample
97ef6a22135d784f7307471f77a8f5b7657899ff022affd3a5046f70fad0e6dd.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
97ef6a22135d784f7307471f77a8f5b7657899ff022affd3a5046f70fad0e6dd.dll
Resource
win10v2004-20220812-en
Target
97ef6a22135d784f7307471f77a8f5b7657899ff022affd3a5046f70fad0e6dd
Size
57KB
MD5
06fdf8d7f959aa61f5462ef3037d0343
SHA1
863ea94f91ed6033717e1193a2e114d6a9278f21
SHA256
97ef6a22135d784f7307471f77a8f5b7657899ff022affd3a5046f70fad0e6dd
SHA512
de9d385f5dad9f5c8475d894ef97b13f1df3d31bc9e777472d9a961b081c5b221f28c6f99c9b3b0790a7c01d50b4d48c850e8470dc4b6a2cc29d79e66b7b5e7f
SSDEEP
1536:N8C3U/CHSWPfasHLhFtjQo9YlR8XbQ1zic20MmP:N8AUKHLPrhFtcoICXbQ1zicd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ