CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ec49c117710622ae7136c60c9c5c7047a1c3bd4405eb17a688e8102b72e623ed.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec49c117710622ae7136c60c9c5c7047a1c3bd4405eb17a688e8102b72e623ed.dll
Resource
win10v2004-20220901-en
Target
ec49c117710622ae7136c60c9c5c7047a1c3bd4405eb17a688e8102b72e623ed
Size
58KB
MD5
0ce7e642599ccfa06abcdaa9f9d13811
SHA1
d1c5258ca6ae92f6e0e817b95f111d7489adfae2
SHA256
ec49c117710622ae7136c60c9c5c7047a1c3bd4405eb17a688e8102b72e623ed
SHA512
a90f866c8393ecc83898b5659a71e76322bbe78bb5997c621f428b6fd4f7aaef0c78dc06b19e8ae60256be45789567d7c5a20c99a75d103cc6d44e365b445e73
SSDEEP
1536:DVV1HToIrToUxMvEvq5LdagSeUQUIMPzpK+:DVrcMzx4cKLlE70+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ