CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bb4ca304c4459ef87fe9622c365b5fba9a12d72de4d1f771bc888ccb4c3c493a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bb4ca304c4459ef87fe9622c365b5fba9a12d72de4d1f771bc888ccb4c3c493a.dll
Resource
win10v2004-20220812-en
Target
bb4ca304c4459ef87fe9622c365b5fba9a12d72de4d1f771bc888ccb4c3c493a
Size
76KB
MD5
5bed8b33e52fb72d4125d99de7ab8925
SHA1
8318779cf7bf66b64d43de7848275fa0edc41b4f
SHA256
bb4ca304c4459ef87fe9622c365b5fba9a12d72de4d1f771bc888ccb4c3c493a
SHA512
06563b9d7e136a8b8746ffb0363e5b8a7ba6147ae65b4ec27a65b344c8b85f5d37e0c83320261b32840caefa0b0a433a04cea6a8f5ecc66b6696baa659df3001
SSDEEP
1536:n56EgIuhyR27rb1rCNPqTNIZLRNC2KOI8PlnEmbgCcNrqhz:n56BxhFgNBZLCr8nEm+rqhz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ