CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c4fe9fb5781c7f2c3af61cab98cbb5fcdaeac7deccdaa9b63ed212d218d255eb.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c4fe9fb5781c7f2c3af61cab98cbb5fcdaeac7deccdaa9b63ed212d218d255eb.dll
Resource
win10v2004-20221111-en
Target
c4fe9fb5781c7f2c3af61cab98cbb5fcdaeac7deccdaa9b63ed212d218d255eb
Size
53KB
MD5
ea35408551f95612c72ff782959e58f0
SHA1
1b98438c2c0dd500d8d23a5b67c6764dee8187e8
SHA256
c4fe9fb5781c7f2c3af61cab98cbb5fcdaeac7deccdaa9b63ed212d218d255eb
SHA512
7ee44b5ea351c38497c2add2d0dfcf927c79728e35432abc90ca80f6447519dc4547543c154b814065d7a1df4c0f2e75b13d8d4f1d5f8b458cbe5e9d5bfdb4fc
SSDEEP
1536:Iykzkagy3FQJbrJ2SRMwY5Ze3R1Nd8u8PLkr7vW:IFzkav3FkrQl5CTdiPLw+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ