CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5f8e10ab122ffaea72541ea7e5336bb2e9c16017caec5b8b19e05e53ca6edc1b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f8e10ab122ffaea72541ea7e5336bb2e9c16017caec5b8b19e05e53ca6edc1b.dll
Resource
win10v2004-20220812-en
Target
5f8e10ab122ffaea72541ea7e5336bb2e9c16017caec5b8b19e05e53ca6edc1b
Size
55KB
MD5
0dc515ae49474ed3d070fb74bca29ede
SHA1
6b1cf1ec5f4ee1c80fa6bd9892e5be9cab50d49d
SHA256
5f8e10ab122ffaea72541ea7e5336bb2e9c16017caec5b8b19e05e53ca6edc1b
SHA512
320822e6cafe5f18fe601a9d5dc7c83e870143dbb75ee0ef72eaf94289d1758295df200e4272812ea040ac37f79925ae34bf4e4a958994d96f7c9464e5235449
SSDEEP
768:R73xlB/LOtoifq6U0b3ILQqOQ5OWMwiq274X60Am9AUdhCqfZOrJxIFCi8zf+VPj:R75Z6gLjMwP226zeh1OrJd3yP8ckvwTh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ