CancelDll
LoadDll
Behavioral task
behavioral1
Sample
afd33513e1f8939b8424383536558c6cacaf6e183394d6c0534681e8de0f9e43.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
afd33513e1f8939b8424383536558c6cacaf6e183394d6c0534681e8de0f9e43.dll
Resource
win10v2004-20220901-en
Target
afd33513e1f8939b8424383536558c6cacaf6e183394d6c0534681e8de0f9e43
Size
52KB
MD5
0f9fcedf9835d2996015cdfdd6edcf7c
SHA1
b31b6b6995672f62abb85d18d734aa886f4e12fa
SHA256
afd33513e1f8939b8424383536558c6cacaf6e183394d6c0534681e8de0f9e43
SHA512
2279ee1df0e208c4190e2af67ec3a706638100040e2987d5f7b6bdbf3352ec3f0c7e81a0ee000693b3f206796079f971f803c66665facf737b1c485f46de84c6
SSDEEP
768:DVV27Pk2b+S9zwj3gViIlqh8bgkdtiMJzy2WTDWyecPhvlA1AHgDgPkpBrGkFQDi:DVV1HTIz8kvxeeyFSeHO8kVF8Y2lEjtD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ