CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ad8ce0d86024e90433bd74573149fcabdf78f4e8c5e9e728ada608d99c4532d7.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad8ce0d86024e90433bd74573149fcabdf78f4e8c5e9e728ada608d99c4532d7.dll
Resource
win10v2004-20220812-en
Target
ad8ce0d86024e90433bd74573149fcabdf78f4e8c5e9e728ada608d99c4532d7
Size
52KB
MD5
0dbb438e4c16a480ac09c56716ccea6d
SHA1
8d1466f0b61133bdbd1a2174369facbc9aa9aa61
SHA256
ad8ce0d86024e90433bd74573149fcabdf78f4e8c5e9e728ada608d99c4532d7
SHA512
c3254b761773860593f3fe75c0973fe37ceb9830bd6df8c9fdb3704c010381755ffc403d013642db3d230c0107a640d53a6d264f8204c32016eb5e9256c837ee
SSDEEP
1536:DVV1HT7BKhwWkvoeP7VCq7TzwK9aexU9RW2rRN:DVrv41kvBPsq7Tz5vYRWWN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ