CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1b4b031b34ad06ab53d44ab8f0ea24c0cebafaba6dda5e135e81692eeebb004c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1b4b031b34ad06ab53d44ab8f0ea24c0cebafaba6dda5e135e81692eeebb004c.dll
Resource
win10v2004-20220901-en
Target
1b4b031b34ad06ab53d44ab8f0ea24c0cebafaba6dda5e135e81692eeebb004c
Size
60KB
MD5
0b54ffbb3d0526b7a02c4bb5610f1a95
SHA1
c98cd53c23254a160ef24a3c3b572489865b1f2b
SHA256
1b4b031b34ad06ab53d44ab8f0ea24c0cebafaba6dda5e135e81692eeebb004c
SHA512
5a68eada00bb4e76a39ffeb8b2c9bec9b827826132918cc7c056b47cd61916bffb9ae2119448aa4e94fd6e85791ea30f02c4fdd317137f2b7f0f8521860a5925
SSDEEP
1536:5yoC1RP7mjbD8LbqAJWn4mog7NhiebRxLdunDnzq3i:kowDiabqvjn7NhiAcvqS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ