CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fad3ccf47317c450d2a59b2520a61b3eb0acca40c09cf240e9b546f2717c4070.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fad3ccf47317c450d2a59b2520a61b3eb0acca40c09cf240e9b546f2717c4070.dll
Resource
win10v2004-20220812-en
Target
fad3ccf47317c450d2a59b2520a61b3eb0acca40c09cf240e9b546f2717c4070
Size
49KB
MD5
0854825e39d0951bfbcb7fabaea2bc20
SHA1
8b960e767cd4907ad225b372afc729a8a5f73bc2
SHA256
fad3ccf47317c450d2a59b2520a61b3eb0acca40c09cf240e9b546f2717c4070
SHA512
aa2c2f1ca13ec0a835b8bb10c5fb3afd39735208f731305dac171c372b7437fe61f1b370a8c1e77a06f46f7c824ab1b1ee8d67af323e840e8a229a24a0ebacf1
SSDEEP
1536:VOzB/iU/sfHAJeNBYZ7Tc8oRSL9zx4Tl5:VK/ilgJcYlTcfKNe5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ