CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b87ac8e016147bd8e13908e275d7f51997e5de0cbe1570e9d73ad7b121ea6c58.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b87ac8e016147bd8e13908e275d7f51997e5de0cbe1570e9d73ad7b121ea6c58.dll
Resource
win10v2004-20220812-en
Target
b87ac8e016147bd8e13908e275d7f51997e5de0cbe1570e9d73ad7b121ea6c58
Size
64KB
MD5
60751ce1a017455a895381105e042323
SHA1
929a44c3f6cd86bf54ced1bccb32b977471dcc66
SHA256
b87ac8e016147bd8e13908e275d7f51997e5de0cbe1570e9d73ad7b121ea6c58
SHA512
f5b59439fd0db518e852d7344757afed59629b42173e5279ae00cd9847417a27d2094f232003d6c9b48565d791d1cbb4e428ede7702f7963e01c85ca60b95037
SSDEEP
1536:R75pdSB4uCaodcfKuAoKFYiZI8WT5X+By:R75ppRdiKuAdFqj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ