CancelDll
LoadDll
Behavioral task
behavioral1
Sample
880d3c292ab740618f1e6dea67b25ca6499d4f96093d87720a7eb185832dd30c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
880d3c292ab740618f1e6dea67b25ca6499d4f96093d87720a7eb185832dd30c.dll
Resource
win10v2004-20220812-en
Target
880d3c292ab740618f1e6dea67b25ca6499d4f96093d87720a7eb185832dd30c
Size
37KB
MD5
060b00fd5867ff4129f49d8ea2d89718
SHA1
a9aae1511e0cf5ab7a5272a8528ef25966201a4a
SHA256
880d3c292ab740618f1e6dea67b25ca6499d4f96093d87720a7eb185832dd30c
SHA512
50ce5a93a2b2291584a954f3dda125720462a10ce94cd4cb4b4c57862cb104c6e63ef541d48ea91296d66ac64823676f8e99182536fa21731a999ecf676d0af5
SSDEEP
768:Yb/oc3OokLfNVJ+LrJmeVSm85meV8J9aeNh1xIgFHxVmJo:wAceoINVALHVFN9zIgFRVv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ