CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9fc9c57c35f8e740734dcaf04b92c0d2a6297b75a1d7a2cdb516a63e2dadd453.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9fc9c57c35f8e740734dcaf04b92c0d2a6297b75a1d7a2cdb516a63e2dadd453.dll
Resource
win10v2004-20220812-en
Target
9fc9c57c35f8e740734dcaf04b92c0d2a6297b75a1d7a2cdb516a63e2dadd453
Size
50KB
MD5
0d0fab211a310cb947b20403612ee89b
SHA1
a1981562c6224b0ac07419bb7c09ee7489cde904
SHA256
9fc9c57c35f8e740734dcaf04b92c0d2a6297b75a1d7a2cdb516a63e2dadd453
SHA512
10ae3682af7b5a3ab515353131d70dd640b5eb8b4310d49c90b6b882a3db8a345aa28922f3f64556f214888494b333afe2fa31f56fe6cba4d40fb8dbeb31a06d
SSDEEP
1536:5yoC1RPpCTywnd34Ct5TcFQCghY/kYt7qi:kowxCTJ425/CgScYt7qi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ