CancelDll
LoadDll
Behavioral task
behavioral1
Sample
12b49bad0543ddc1911d56fc3f04b1e2854eae5d36e8d51bd067575052d59791.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12b49bad0543ddc1911d56fc3f04b1e2854eae5d36e8d51bd067575052d59791.dll
Resource
win10v2004-20220812-en
Target
12b49bad0543ddc1911d56fc3f04b1e2854eae5d36e8d51bd067575052d59791
Size
61KB
MD5
08e693aaefcb98cc849964710dd335b0
SHA1
613186fa23815bf6e49cbfd2f9cf337235de4831
SHA256
12b49bad0543ddc1911d56fc3f04b1e2854eae5d36e8d51bd067575052d59791
SHA512
1034d32a153bfc80a951ac21ca1a21b2efc6720cc253a700c4f4782d5171ebe1665821bae055fcf34d3e814153487da5fb0eefa28f6abd784c7d5e66e7b39f4f
SSDEEP
1536:hXGa7ReQC26j+ZvNq6ymK+LUCV8E1/uoXozHZgexGScSy:r7RC2qqlqh07V/uL7yexcSy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ