CancelDll
LoadDll
Behavioral task
behavioral1
Sample
878a08816209fccf856ee1ce1852248ee370b8111d9f4fb945c0e3405805494f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
878a08816209fccf856ee1ce1852248ee370b8111d9f4fb945c0e3405805494f.dll
Resource
win10v2004-20220812-en
Target
878a08816209fccf856ee1ce1852248ee370b8111d9f4fb945c0e3405805494f
Size
67KB
MD5
9de31ed6bd63ab2b403a70cfaa7ded77
SHA1
452cc53e0bc3ab9fca08f6501efbb31cb59ec643
SHA256
878a08816209fccf856ee1ce1852248ee370b8111d9f4fb945c0e3405805494f
SHA512
1ec2241f776123e8030eb9f329b9017bd179206235750d52b21f6796097c2d2816cf4e1eab31b894e8640feb517fa50d5297aec3076ba27740e044b6aa40fd25
SSDEEP
1536:IykzkagLnZLry3Y4GBRmGJAWJGURXuCie7glOx4zQIY:IFzkaqdqY4YJGWXuCg44Y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ