CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a399f610cb8056cbc1508152acbb5583acaebc09f221d1372d291ef5731226ab.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a399f610cb8056cbc1508152acbb5583acaebc09f221d1372d291ef5731226ab.dll
Resource
win10v2004-20220901-en
Target
a399f610cb8056cbc1508152acbb5583acaebc09f221d1372d291ef5731226ab
Size
59KB
MD5
39f8a75d1ac5d47d26986b6a731ffbb0
SHA1
4ec38d03772171348438012d82a5ad04a32b7843
SHA256
a399f610cb8056cbc1508152acbb5583acaebc09f221d1372d291ef5731226ab
SHA512
6955617de3f7c90352c098c11e0983d7a897e283eed8a9accfb49407f21e3b6fb4af662cce919f27f03c589d37de24966c064a754cbacabb5a46d958fc0cedd9
SSDEEP
768:IykIwePd8g7dHu8f9iZt3KoCpyY0rSVZgK/Ardwfsc8V1ywOBITDrJy+Z6f:IykzkagNliZ5vCUYCKgCIcml/VyE6f
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ