CancelDll
LoadDll
Behavioral task
behavioral1
Sample
afc8ba920af683900556973fc126049c024de0cce8f3de950cb2ac06ad45994b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afc8ba920af683900556973fc126049c024de0cce8f3de950cb2ac06ad45994b.dll
Resource
win10v2004-20220812-en
Target
afc8ba920af683900556973fc126049c024de0cce8f3de950cb2ac06ad45994b
Size
54KB
MD5
0520f78ed866568a91802aef2813386c
SHA1
f81b2d8c9af945751ad0d6678a4d57d42698ac95
SHA256
afc8ba920af683900556973fc126049c024de0cce8f3de950cb2ac06ad45994b
SHA512
e85f8d2b832ecbd8ebf6cf8b2a24d750ed592e1125a249ae759b2e9cb6ee88ea08296872029f15c3ff952a0e91e4b95340f8e7ce3acb75c31760442030236a77
SSDEEP
1536:wAceoINVAL3Dz8che+3DyC1OPiTc6aCN17LVI5:wAcTqG3Dz8N+3DzITC7PVI5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ