CancelDll
LoadDll
Behavioral task
behavioral1
Sample
29519418a165e4a9fc3a8670d19b923ef1324cfe3fc9e1b52ab65970451af4dc.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29519418a165e4a9fc3a8670d19b923ef1324cfe3fc9e1b52ab65970451af4dc.dll
Resource
win10v2004-20220812-en
Target
29519418a165e4a9fc3a8670d19b923ef1324cfe3fc9e1b52ab65970451af4dc
Size
68KB
MD5
0afb502ab8158a20b942b22ea375bf0d
SHA1
a158bc86d36373d96a4de2240ac140079eb827c4
SHA256
29519418a165e4a9fc3a8670d19b923ef1324cfe3fc9e1b52ab65970451af4dc
SHA512
15d7680b3454e00491473c007a987b9a9fe27523711614bec37c9f9654293b62aebd5c2644ca869bf2f621b026dac4ff04c0a270870ef714beccd630576f6dc1
SSDEEP
1536:wAceoINVALWBfPL5lIJoSt2HLh5ACibaDVAOS21tAr8nZr:wAcTqGWBfNlIJoSOuCiUVOStnt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ