CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ae60e759ada1fb13e7b412ffdd62e955ca2926cc2feb48122f69e3d23b0a2767.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ae60e759ada1fb13e7b412ffdd62e955ca2926cc2feb48122f69e3d23b0a2767.dll
Resource
win10v2004-20220812-en
Target
ae60e759ada1fb13e7b412ffdd62e955ca2926cc2feb48122f69e3d23b0a2767
Size
79KB
MD5
0bd0c0bb116d64d5b2d33793538ecf89
SHA1
d10cd1322440b04ab14de01513b77657f8c1ae65
SHA256
ae60e759ada1fb13e7b412ffdd62e955ca2926cc2feb48122f69e3d23b0a2767
SHA512
947d4245ac2be91f7d03a4cbde109191a28324a17dfef83713c0de065a5bb72b7e8f6aa5ef4b3b6f3657f4b75ba8cd5ccee9a1b7f5b4e96717c326223266c7a8
SSDEEP
1536:yok0mU99Qr+DKJ6PwqqcolB/ff8o99u6lL/sbn+pRglk/F92HWOmLu:/maQOo6Pwqq/Rfd+cDvglk/+T
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ