CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ad07b7725c9e961fba29b4e01ccbc775a6f81dd56c7fe968c4b57f283c35ede4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad07b7725c9e961fba29b4e01ccbc775a6f81dd56c7fe968c4b57f283c35ede4.dll
Resource
win10v2004-20220812-en
Target
ad07b7725c9e961fba29b4e01ccbc775a6f81dd56c7fe968c4b57f283c35ede4
Size
59KB
MD5
0672c331ba02cde5042cb39bb6d03263
SHA1
c8a8fabc9d408764c4e5f17990ca65764bd3a092
SHA256
ad07b7725c9e961fba29b4e01ccbc775a6f81dd56c7fe968c4b57f283c35ede4
SHA512
7ffe02c21b22157c4d12d5d5bbafdb2467090f2e210588f784cecb7e529ef74f6a3a0b9a9d1de3dcf1582d36738ba1bc313a0ce3dafebe93755396e3caa21196
SSDEEP
1536:DVV1HTp7KaZhwG3NPCu3PpH26Geqw4pwZdUK:DVr1/wGdqAvGfKZqK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ