CancelDll
LoadDll
Behavioral task
behavioral1
Sample
4d4900ecbc9e2c2196ba34055970850f5aad548414f1a414ed07cd358d158a6e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4d4900ecbc9e2c2196ba34055970850f5aad548414f1a414ed07cd358d158a6e.dll
Resource
win10v2004-20221111-en
Target
4d4900ecbc9e2c2196ba34055970850f5aad548414f1a414ed07cd358d158a6e
Size
79KB
MD5
367d88038e7d93c1599075b53b59feaa
SHA1
0385832c64c33c810ee8662ef2fc4d53af15ebc4
SHA256
4d4900ecbc9e2c2196ba34055970850f5aad548414f1a414ed07cd358d158a6e
SHA512
74de2cc54b00abae9ede69fb93a10ba8d419d60428fdf52b838c6678bced900e103c9fe89692307ff1e5f5154e6b4be8fe45725e7d1feb799e3c0b7f090da11f
SSDEEP
1536:wAceoINVAL5y2YvGulvIYfiVqz72LXWqNW0hZWuRbDisJKBw:wAcTqGQFtvnfB72iKXhcgDisJ8w
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ