CancelDll
LoadDll
Behavioral task
behavioral1
Sample
994f8543a6fe0e9cd1e66b8f4a56b17ea30c892bb3ed5c6d409e6de2216c0634.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
994f8543a6fe0e9cd1e66b8f4a56b17ea30c892bb3ed5c6d409e6de2216c0634.dll
Resource
win10v2004-20220812-en
Target
994f8543a6fe0e9cd1e66b8f4a56b17ea30c892bb3ed5c6d409e6de2216c0634
Size
58KB
MD5
35a45d29c76652453e014a77246c8886
SHA1
5cdb51d070a0fa312d84775d38b130b83c68b5f4
SHA256
994f8543a6fe0e9cd1e66b8f4a56b17ea30c892bb3ed5c6d409e6de2216c0634
SHA512
930dca3f503107ac0de2fb99cdde5ceeed6627a172b3d98b687619d8c9d2769f02ba45550b091276ae466d210d6fab39205cacff2d17e2566b6828c0e62f4a2a
SSDEEP
1536:68C3PjhLO2jq/LV2I8embTtvbjb5rsUxjRMd5ACw1lRH:68APjNjqJ2IZSbjZsQ9Md5PUP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ