CancelDll
LoadDll
Behavioral task
behavioral1
Sample
45950aee4ccef792b02a99e4e4d296dc9858e03e86e4474d87de002d25eade2e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45950aee4ccef792b02a99e4e4d296dc9858e03e86e4474d87de002d25eade2e.dll
Resource
win10v2004-20220901-en
Target
45950aee4ccef792b02a99e4e4d296dc9858e03e86e4474d87de002d25eade2e
Size
53KB
MD5
08594e19270b2f1b7ce283ee26d39060
SHA1
6f9fc39900a63daf78797c0b0dc20d1c230d34bd
SHA256
45950aee4ccef792b02a99e4e4d296dc9858e03e86e4474d87de002d25eade2e
SHA512
ec5a4ac5d8ac2bb3907c3e3baf721511dd455ec364e0bc5201643cd835f99fffb08ad183a0143ae58a9a469f3694719c8eca03bea979a0a72455ff10e2c1d995
SSDEEP
1536:UMNxZuGt9YD6QcnHpyyw7NagG97/4UKYL7aV+:UMNxZuGt9YDJ0Rw7NagGxgRYq0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ