CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e96902f96aef5c1538342d66e82a18f89f686ffd97ebaacbf3a0b54c4f66f9a0.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e96902f96aef5c1538342d66e82a18f89f686ffd97ebaacbf3a0b54c4f66f9a0.dll
Resource
win10v2004-20220812-en
Target
e96902f96aef5c1538342d66e82a18f89f686ffd97ebaacbf3a0b54c4f66f9a0
Size
68KB
MD5
09215b10e1659baa2064c818b2938a1b
SHA1
a4c240d919cb6a6816445528de5ae533c911e782
SHA256
e96902f96aef5c1538342d66e82a18f89f686ffd97ebaacbf3a0b54c4f66f9a0
SHA512
1e32c6e2edb9412c3020c5375a3ae6eb8ada042dffa7e3319b5d03673f175c068a47831df0b80addec0f75c4c272d85870f6d4d408dc4296f5e114dc3f556bee
SSDEEP
1536:NomNZnI+CQSrNH/myCnlSW9RXIs8SEfWkdPTYYLoe1/vhn+bFc5Hzl:NooC+CMD9RXIsjEOkdbnhZ+buJl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ