CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b4991a5887d7b92ed49ab0995376512ac5f4f58eb6c18ca67f1b13708d854bad.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4991a5887d7b92ed49ab0995376512ac5f4f58eb6c18ca67f1b13708d854bad.dll
Resource
win10v2004-20220812-en
Target
b4991a5887d7b92ed49ab0995376512ac5f4f58eb6c18ca67f1b13708d854bad
Size
75KB
MD5
085a57302883656d537dea19d76e7410
SHA1
ce4d7b1857be77d2159cf7fe3acfd15cc233cc55
SHA256
b4991a5887d7b92ed49ab0995376512ac5f4f58eb6c18ca67f1b13708d854bad
SHA512
04764ec8d7e2504bddb024a89956b35a9833078795bcba4938c903951ff9daabc41d57a77a5a8ae75905017cf03fdb9976bcc939559c49694909d063eee9a34b
SSDEEP
1536:knK0jhOKw+5hqmT8NEmXBSkD+dOLQxGQNwBrbSZuzYcdN0b6Yj5vawGwTqOv6Q:knNhOKw+5hkNEUELuQNYjzRdIbFv+evL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ