CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f52619f6ff34590b828f01d37d6f91eaa7ea12652b70391a31816ddd1fa0f596.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f52619f6ff34590b828f01d37d6f91eaa7ea12652b70391a31816ddd1fa0f596.dll
Resource
win10v2004-20220901-en
Target
f52619f6ff34590b828f01d37d6f91eaa7ea12652b70391a31816ddd1fa0f596
Size
59KB
MD5
08e005c4087c8cd4c552a3663a51a270
SHA1
0402f6f1167c5c462204bf3f1ec7b2c6ff0d975c
SHA256
f52619f6ff34590b828f01d37d6f91eaa7ea12652b70391a31816ddd1fa0f596
SHA512
0c855cf23c8b659c7fe2817dab99f402891db4a2321dc4c3f13c9285674db112fa5b454cd2e15686b6cb367e20614d16dd78cf15bcccba3251b7e726e491cd85
SSDEEP
1536:Sj2Om+8Uh70tYLrfuJFNHMDGXBK36ifVujXfTYLgdy:Sj2l+8rhFZ4G0rVujXLwR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ