CancelDll
LoadDll
Behavioral task
behavioral1
Sample
afaa4e197149c1aed400c89b8a960c39ea91a47ca81ecae16087fd4756232184.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afaa4e197149c1aed400c89b8a960c39ea91a47ca81ecae16087fd4756232184.dll
Resource
win10v2004-20221111-en
Target
afaa4e197149c1aed400c89b8a960c39ea91a47ca81ecae16087fd4756232184
Size
70KB
MD5
61b7f4f540cd1a50738ddfd9187cb3c4
SHA1
5401aceb0ddf32a1494fa5eec0cc8ef62457d9d4
SHA256
afaa4e197149c1aed400c89b8a960c39ea91a47ca81ecae16087fd4756232184
SHA512
1c6d0832951a7c7815443a5e79b464c851479b8768d6b1c621b9b7f1cc723e83b7c07ba2baa17ad8551dc7b4e2d988f3da4ae2fe67ea780bc31a76a0ba6da2d1
SSDEEP
1536:Iykzkag21MadZNO+o+B283VMNbWPtMju+fhL9QikSA6Fj:IFzkaL/fXdeNbjFh0SAsj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ