CancelDll
LoadDll
Behavioral task
behavioral1
Sample
965b5921225f52d9bfd8f4d059632721b1ccb9bd98d556c986ea4fb84d6de28e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
965b5921225f52d9bfd8f4d059632721b1ccb9bd98d556c986ea4fb84d6de28e.dll
Resource
win10v2004-20220812-en
Target
965b5921225f52d9bfd8f4d059632721b1ccb9bd98d556c986ea4fb84d6de28e
Size
58KB
MD5
054501bd50a815d06c35d37d16f6e113
SHA1
a16e5602fc924d982af07461e93e91f877c48301
SHA256
965b5921225f52d9bfd8f4d059632721b1ccb9bd98d556c986ea4fb84d6de28e
SHA512
e47d20fa12395fea3ad4613925a0a0c4fd23ff483a991f4de70647f85cdf554786dc2f86119981278d36d02f26199fcf2c21a8bb5d880f8ac7840036004ea242
SSDEEP
768:IykIwePd8g7dHlNWKStylDKG+dQWEg04hp3cXgADZ05PNT2UlKKMP8AfwUhG:IykzkaggbtyBD+1hxcXx6DTlKKk8AxG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ