CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9909d4e4d650e96cb79bc2d2de9f09471af7d809979ac1fe3b04adcc2d3b7df6.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9909d4e4d650e96cb79bc2d2de9f09471af7d809979ac1fe3b04adcc2d3b7df6.dll
Resource
win10v2004-20220812-en
Target
9909d4e4d650e96cb79bc2d2de9f09471af7d809979ac1fe3b04adcc2d3b7df6
Size
64KB
MD5
08522f61ae1375432bdabf1032099950
SHA1
039bf0cdaee3ba2c8de6d50ae394f83a3a96cec2
SHA256
9909d4e4d650e96cb79bc2d2de9f09471af7d809979ac1fe3b04adcc2d3b7df6
SHA512
085a6220acca0d4d857201ebd93946ce4930b9fa01c494a9e9c7f3a71883489e01c1efbacb94a9697f31c46fd3bc058135396874af16ae04c31313426106af9c
SSDEEP
1536:MtGxxe/eJELOmYs4WvJEjwf4M/jy6u2hD88UhBpVEmEJnF:MtGxxeHOPsh2jwf4M/jyXCwnsJF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ