CancelDll
LoadDll
Behavioral task
behavioral1
Sample
27b1a0e722c4bfb4d80cd7efed4b48969767ab3bdabc67ece42b9a849917c37c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
27b1a0e722c4bfb4d80cd7efed4b48969767ab3bdabc67ece42b9a849917c37c.dll
Resource
win10v2004-20220901-en
Target
27b1a0e722c4bfb4d80cd7efed4b48969767ab3bdabc67ece42b9a849917c37c
Size
56KB
MD5
53317d069eeb78615a962f58efbabc05
SHA1
dc26a5f36bef089738bae3613113995dd3ff0009
SHA256
27b1a0e722c4bfb4d80cd7efed4b48969767ab3bdabc67ece42b9a849917c37c
SHA512
5375fd91cb4e84f727cdcd828434ce8c396673d52a14f85ff40101e528296d24c25fda6a90dcc76e7af787270b1b80d4c246ba96535018da77b9f8d2101a48b0
SSDEEP
1536:IykzkagYvBpaRnrKta4/pI2dz2JDjoP7bnmXsXVS:IFzkarvBpaR4IcS+fnmXZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ