CancelDll
LoadDll
Behavioral task
behavioral1
Sample
46d54c9bf8d457c4886df5722cc71b07736359c0e20b2917d9df4c1e62e7bb3d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
46d54c9bf8d457c4886df5722cc71b07736359c0e20b2917d9df4c1e62e7bb3d.dll
Resource
win10v2004-20221111-en
Target
46d54c9bf8d457c4886df5722cc71b07736359c0e20b2917d9df4c1e62e7bb3d
Size
66KB
MD5
3d96d5ed294e8cda9f5120b3b9195d8a
SHA1
cec9eb6970add0e91560ea47af72f6680d9d423b
SHA256
46d54c9bf8d457c4886df5722cc71b07736359c0e20b2917d9df4c1e62e7bb3d
SHA512
d5674ac4400722e7400340caddbf477070a9c50199d8cce06a4ee438cd69120fbcd176f540f2b913e49ae5f2e679fb62dd7f29961cce3bf0e9f8d90f4c666ccc
SSDEEP
1536:dQ76ypVpJiOganhJnDwHd0jPuutvE8EZErND22UAHD:S75V/hgahVDwH6jPu8ErE5ZHD
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ