CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2aa33ad7d289fd94849e54ebe605c3ec85345a01d849fdff648a258d93db40b2.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2aa33ad7d289fd94849e54ebe605c3ec85345a01d849fdff648a258d93db40b2.dll
Resource
win10v2004-20220812-en
Target
2aa33ad7d289fd94849e54ebe605c3ec85345a01d849fdff648a258d93db40b2
Size
62KB
MD5
0faef5e6409f06e0da9f067e8b76d452
SHA1
a63b8f2d667cb3ac00f081a03a78e15d7a4d0656
SHA256
2aa33ad7d289fd94849e54ebe605c3ec85345a01d849fdff648a258d93db40b2
SHA512
749ca28aabef89965d81ac96096e7bb078c5cf839b6fd9322e742416823eb4f2a000425b6b220c8fb2367662297f4b417f83fc7c5d9ffed4f9b6fca3e4e6901e
SSDEEP
1536:wAceoINVALlCCbO5q1aonQXtsBPKI4oUXxu:wAcTqGlC2OUseQXeNKI4oYu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ