CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7baf7cd17e01de8780f3a940fad350eff2d48a21e437fbfb06a6cc5b36fe559c.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7baf7cd17e01de8780f3a940fad350eff2d48a21e437fbfb06a6cc5b36fe559c.dll
Resource
win10v2004-20221111-en
Target
7baf7cd17e01de8780f3a940fad350eff2d48a21e437fbfb06a6cc5b36fe559c
Size
57KB
MD5
4ad54c3041f5102334fdf7799b711977
SHA1
98eff0c8b8c559de1a1f81c5664a449a20eaa21a
SHA256
7baf7cd17e01de8780f3a940fad350eff2d48a21e437fbfb06a6cc5b36fe559c
SHA512
1280e6496327bd71b0c9f76f04438bc73611ea3b9c9fda5bcb77d95b21f3ec6ebcdf05309d01da7ebee0b0ed7c9a48289afb71a45f142293ab5965ed15a4cad7
SSDEEP
1536:IykzkagUCGD5e8ngIa1Qx+6Iapu4eNC6Z1Sz:IFzkaG25e8gIOQx+D4YZ10
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ