CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6db8d1a563a77360e85e60cc4e7209396aab6b64018f12beabca38b9b9804623.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6db8d1a563a77360e85e60cc4e7209396aab6b64018f12beabca38b9b9804623.dll
Resource
win10v2004-20220812-en
Target
6db8d1a563a77360e85e60cc4e7209396aab6b64018f12beabca38b9b9804623
Size
68KB
MD5
1e1f576d3d5f52b77d3e3125f0bf9612
SHA1
ed5bc88d4691d8209e90e7c43d10a0899a38ad38
SHA256
6db8d1a563a77360e85e60cc4e7209396aab6b64018f12beabca38b9b9804623
SHA512
448056b1fcf4e5aa6ed7f75e47130fe71324d9d67cbb36381f14d67c91b525f790503394756b8929e61c9701a99e890cef4a36dc66703268591f93c86b74225e
SSDEEP
1536:csrG6lMVhZFCQencqHLT/mOPrRrcm/9DSR:c2vly0QecqHeOP1Ye+R
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ