CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fea5e075c748691a974bf35e1865bf8730e95f1de41a813c48973172327c8a21.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fea5e075c748691a974bf35e1865bf8730e95f1de41a813c48973172327c8a21.dll
Resource
win10v2004-20220812-en
Target
fea5e075c748691a974bf35e1865bf8730e95f1de41a813c48973172327c8a21
Size
66KB
MD5
0d853f770eb94d6876e14e0addc88858
SHA1
da0b18143101ed5ade9a063ece694f854088bef6
SHA256
fea5e075c748691a974bf35e1865bf8730e95f1de41a813c48973172327c8a21
SHA512
3368204199667c0eed0891a091602ce6fab0869dd84a983be641f16c23701a6fba270045ac8d27e61b9d4f41dcd832a5c765a0eb9b22e92c9212387735a8554e
SSDEEP
1536:DWkfEAgnvIgQa7XOLvX9bFi1QnuHiEQmeBIkadmUvZsHk:ScEA44a7XOL/uQnEiCeBIKiZak
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ