CancelDll
LoadDll
Behavioral task
behavioral1
Sample
13c313b6a3364f19bb3e4779acde37425c1a0a07c41ec8f4c55e568e11e0c7bb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13c313b6a3364f19bb3e4779acde37425c1a0a07c41ec8f4c55e568e11e0c7bb.dll
Resource
win10v2004-20220812-en
Target
13c313b6a3364f19bb3e4779acde37425c1a0a07c41ec8f4c55e568e11e0c7bb
Size
59KB
MD5
085b25997aef92ea10d45cbec7b2c810
SHA1
680a94a75a0077feb19b090218d060c167b08758
SHA256
13c313b6a3364f19bb3e4779acde37425c1a0a07c41ec8f4c55e568e11e0c7bb
SHA512
031e13467ff35e056aa7f9152a7d369b2a68132ad5f17c03ad4cbb9d8dd51e482dd69f7b2f6efa50c6d4ef3b6bf29432cac2913e55c0a420408d188ef903f6c3
SSDEEP
1536:MtGxxe/gWQ7GjfAXlxMf4EsRbNiG8ZiHznIbPuMw:MtGxxejjAVxMf1sX38Usbs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ