CancelDll
LoadDll
Behavioral task
behavioral1
Sample
efbdb2f0e3c62401bafe0d233540bca787ec8769613abbe525054514349e0c06.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
efbdb2f0e3c62401bafe0d233540bca787ec8769613abbe525054514349e0c06.dll
Resource
win10v2004-20220901-en
Target
efbdb2f0e3c62401bafe0d233540bca787ec8769613abbe525054514349e0c06
Size
61KB
MD5
0edd47b58f30b8e8086a6b0c30b3b746
SHA1
efc2e9fad8b7d6dea672d4ae2788c5a7bfbdc4f8
SHA256
efbdb2f0e3c62401bafe0d233540bca787ec8769613abbe525054514349e0c06
SHA512
46f6251507650ef4f4f8c33c5240bfde2c607f83a585c5fef53a7086e31c9b66f3b0455a87bb08d4503e8fe8141e8c94d0deb906702eab226e5770906735c44e
SSDEEP
1536:DVV1HTEQ72sCx81PQr48xcjv7VFvFhDeG:DVr4Q2xAP+4nv7Vl3D/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ