CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ea51b53a7f3fb71cb4cf05bcd777f82f1c2ffdc8babea1eb252d8ef2fbe64651.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea51b53a7f3fb71cb4cf05bcd777f82f1c2ffdc8babea1eb252d8ef2fbe64651.dll
Resource
win10v2004-20220812-en
Target
ea51b53a7f3fb71cb4cf05bcd777f82f1c2ffdc8babea1eb252d8ef2fbe64651
Size
66KB
MD5
0fa8633b37a9293d84b633453496f359
SHA1
0d26e91ac831c510a35aaab22b0556e51c8bd4c4
SHA256
ea51b53a7f3fb71cb4cf05bcd777f82f1c2ffdc8babea1eb252d8ef2fbe64651
SHA512
8a393d909ca11a1ec53d6f6bf1b716b1b82caca5e096e4abf355f91949391ebc0386048077cce569cbfb5a2914aaf27d5df1fa61fcca0442bf343bbabc1b5647
SSDEEP
1536:IykzkagnJ8IAkyTWp9Krp1rmIeRUbvp+O5Z9:IFzkaaJ9AkwWOV1rJhpbP9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ