CancelDll
LoadDll
Behavioral task
behavioral1
Sample
85e535a8d9706b0da911118a2550d169af2cc16768d527d7f86b8a728d5567df.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85e535a8d9706b0da911118a2550d169af2cc16768d527d7f86b8a728d5567df.dll
Resource
win10v2004-20220812-en
Target
85e535a8d9706b0da911118a2550d169af2cc16768d527d7f86b8a728d5567df
Size
59KB
MD5
fb1230df56c9b29ac2cff1af83c0b880
SHA1
7b8537ee189635969552d2c974be770bba52ad90
SHA256
85e535a8d9706b0da911118a2550d169af2cc16768d527d7f86b8a728d5567df
SHA512
93665f4376166897d6530113ec41c09fc67a9c4e0bd39ee9ada8b0f0baf78f0a952bc82f1e41c51b524d4f84de1e90f01afd8ccf5de4d5a763b606664abb172a
SSDEEP
1536:IykzkagClVRK07l7eZwXhgOP3A2qWGPVVHk:IFzkaNv4QBxXBA2iPVe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ