CancelDll
LoadDll
Behavioral task
behavioral1
Sample
12d7cf157ef5e755ccad307aa544866e4b7e5747c7e15182e20a491382ae40d2.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
12d7cf157ef5e755ccad307aa544866e4b7e5747c7e15182e20a491382ae40d2.dll
Resource
win10v2004-20220901-en
Target
12d7cf157ef5e755ccad307aa544866e4b7e5747c7e15182e20a491382ae40d2
Size
62KB
MD5
0a1f3fe47e67a9a4f41d2d67ad81a58a
SHA1
b66ab5d452fd425b66598d4a62e8ea9565396cf9
SHA256
12d7cf157ef5e755ccad307aa544866e4b7e5747c7e15182e20a491382ae40d2
SHA512
6c4c532a112191bc4f7ed10c2ff174a1efe671a373aeb79e8a4741ceca0e21eb121d6457dda52d33236594bd03f4456efa80c8b4427eecc3c41eb879106a9957
SSDEEP
1536:DWJMe+4fp/ikep+IPNnTxknMqlG2nHig3y+3FmmG0G:EMOf0ke0IPtHqlL3n1mKG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ