CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dea811883f688a04add4bdab499a9e7d8e06829f878d44ba461544415030984c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dea811883f688a04add4bdab499a9e7d8e06829f878d44ba461544415030984c.dll
Resource
win10v2004-20220812-en
Target
dea811883f688a04add4bdab499a9e7d8e06829f878d44ba461544415030984c
Size
69KB
MD5
42d4244d47546f42c20f9cef23587b98
SHA1
49eb54f475bd84351646cdf3a415bc28d0646227
SHA256
dea811883f688a04add4bdab499a9e7d8e06829f878d44ba461544415030984c
SHA512
d4579b779b9d4cb95922eea7cdefe3e21eecc5581dd9fd7d1e15b28b564b2394769fa10fd14a816ce0c9f498f0758524efefa7388f086d28cf855988c25d3066
SSDEEP
1536:5yoC1RP+XtzIzCn8GXy8xdu6lfBCGLGCtKZUGo:koweTn8GiD6lfBCGLGCt21o
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ