CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c79554f46373d433e15cf4dbc85c0a5459b225f26978c13eae381849c8930001.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c79554f46373d433e15cf4dbc85c0a5459b225f26978c13eae381849c8930001.dll
Resource
win10v2004-20220812-en
Target
c79554f46373d433e15cf4dbc85c0a5459b225f26978c13eae381849c8930001
Size
63KB
MD5
d8e11caa64952eabd5d2672f44f9140d
SHA1
23be117444e30a259811bdd052e363613d1f883b
SHA256
c79554f46373d433e15cf4dbc85c0a5459b225f26978c13eae381849c8930001
SHA512
f0f4fb22e5466f43f2e8d5d24aef473c5abd9fbebca57b7e16a6b4648e80899afc10dd0722f67f8d2d3da937abc7bd4921e33dcc4bce5bd0bc643df226c92f9b
SSDEEP
1536:C8C3Q/Bavq2k+Qy8fADhJr2dAKxWau7/GTINnZaZ:C8AQ2VH58GV2OBH/4z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ