CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c0df2e1053d19fb2802b62d3b0718f43fc2225dd5adeb604058774545a4756ab.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0df2e1053d19fb2802b62d3b0718f43fc2225dd5adeb604058774545a4756ab.dll
Resource
win10v2004-20220812-en
Target
c0df2e1053d19fb2802b62d3b0718f43fc2225dd5adeb604058774545a4756ab
Size
74KB
MD5
f39d551bc72d925fa9caba6211999010
SHA1
926b3373572790e2923118314b605f10f369f963
SHA256
c0df2e1053d19fb2802b62d3b0718f43fc2225dd5adeb604058774545a4756ab
SHA512
5cd1d07c914caf3aa86c734990ee601c4fc7b3bed8fb997fffc4fe66126936fd89a9ba3d4b5185d2a7397d43fdeb10edb24a7d3da8adfa44d1376c4d7058bf2b
SSDEEP
1536:4IoC5VxRhg5YBN06UBCllWbFCxM3eEVYRw4PuEYubW8UAegMG:fokVxRh1BN06UBCllkFgEGRw8Mu+gH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ