CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5bd175355ff785f5d6eea4172a25244ace91c2c4c19a044189ce2468c50d1dfa.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bd175355ff785f5d6eea4172a25244ace91c2c4c19a044189ce2468c50d1dfa.dll
Resource
win10v2004-20220901-en
Target
5bd175355ff785f5d6eea4172a25244ace91c2c4c19a044189ce2468c50d1dfa
Size
68KB
MD5
085d9644fca72cdc45e181c27cef8630
SHA1
7cb6bdce4eecb5848ef19aa4e4058ec7b534c019
SHA256
5bd175355ff785f5d6eea4172a25244ace91c2c4c19a044189ce2468c50d1dfa
SHA512
45cf24b44942391cb2fc9c5d88557e4a957759bed5a225b2516cf30625d54ac1da010c2f0f48f0a8f32ff537ef007626efa68b3b68d31cfd8911601fe0b00ce2
SSDEEP
1536:5yoC1RPyg/3UCRM0O5z+3qNHAQIDG48BDcaywqq+ybPsvCScVem:kowx/3Uc2QMgQcG4QD6nersJSem
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ