CancelDll
LoadDll
Behavioral task
behavioral1
Sample
99097c57cac0b20c85f3e93f4528dc18ab17aef35653d40ff3cb7d3e55aa4d3c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99097c57cac0b20c85f3e93f4528dc18ab17aef35653d40ff3cb7d3e55aa4d3c.dll
Resource
win10v2004-20220812-en
Target
99097c57cac0b20c85f3e93f4528dc18ab17aef35653d40ff3cb7d3e55aa4d3c
Size
78KB
MD5
9854401b3f59a36ee5a893f4c381021c
SHA1
ca0ee2a743fe7c1c1bec56f212322281fdabc3ac
SHA256
99097c57cac0b20c85f3e93f4528dc18ab17aef35653d40ff3cb7d3e55aa4d3c
SHA512
f7d4de5754e1945f2bfbe5ad82a843a5e9d2fffca65d54a2c819fe0ae858057c300859d48132ab478d9c62240901e066c3549a0a84f1a00994de03868b7e3d84
SSDEEP
1536:7ufjJaoWCH+c6BuF40vYCZRuQmeaPLV6SREqaqe49d4MGXHS9v6VbI:CVaz9c40vY2RQJ6SREqaDYKMpp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ