CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2d5127696bc20828c4d19581c563c22aab9073f44dacc5ecadfb9dd6d6621ed5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2d5127696bc20828c4d19581c563c22aab9073f44dacc5ecadfb9dd6d6621ed5.dll
Resource
win10v2004-20220812-en
Target
2d5127696bc20828c4d19581c563c22aab9073f44dacc5ecadfb9dd6d6621ed5
Size
62KB
MD5
04dee7c08a2f8c896af5a8d7106935ca
SHA1
44edc1801696c575827b76cdaabef54e76413e52
SHA256
2d5127696bc20828c4d19581c563c22aab9073f44dacc5ecadfb9dd6d6621ed5
SHA512
7f129609e9377c7cf7ed65d54550b8f372e2b3337f2218de24e06506dc29a59553bc119acc5cdee6729b0a763932cdab7ef215b71e947b2c1b328306c205aff2
SSDEEP
1536:n56EgIj3QGIecz3C1gTGX4B2cRMsWuwKsxQjoTM9:n56BaAGlcu1gTGX4B2WL+goTM9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ