CancelDll
LoadDll
Behavioral task
behavioral1
Sample
88f1ef68597a68f8b2f29093976a1f250e711e211efe22e11b6c9736ecf18477.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
88f1ef68597a68f8b2f29093976a1f250e711e211efe22e11b6c9736ecf18477.dll
Resource
win10v2004-20220901-en
Target
88f1ef68597a68f8b2f29093976a1f250e711e211efe22e11b6c9736ecf18477
Size
44KB
MD5
08e02290294b15241c1d5a898e962900
SHA1
7aefa3a3dd468961671382b2998aa06bcd796854
SHA256
88f1ef68597a68f8b2f29093976a1f250e711e211efe22e11b6c9736ecf18477
SHA512
9dc1f9ded2f0337720e4cf1ed596911f4561a48bb1115642f5375ddfeb3f36be43e1e71d3d4fd9605ac5442dc000191ff02e1636259218c2a5eb21a94723e28f
SSDEEP
768:M7Zm5Jqexe/ItpeFg2CIYwtPWlcuZAKxnJfWN6yhx0e:MtGxxe/ItpeFgQz+llNxnBe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ