CancelDll
LoadDll
Behavioral task
behavioral1
Sample
60858ba19ff19f22adfec86295b07cc0d7fdd4f4da617a8db10fdfabe12a5e6f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
60858ba19ff19f22adfec86295b07cc0d7fdd4f4da617a8db10fdfabe12a5e6f.dll
Resource
win10v2004-20220901-en
Target
60858ba19ff19f22adfec86295b07cc0d7fdd4f4da617a8db10fdfabe12a5e6f
Size
65KB
MD5
fcb4f3bba05272ecbd564bc0ea939016
SHA1
6b0860f09c1b2ed10b6d82db30b3238cac8bc379
SHA256
60858ba19ff19f22adfec86295b07cc0d7fdd4f4da617a8db10fdfabe12a5e6f
SHA512
cf239e2eaa41e5a0878425cfb48d309d3a78221e33a8381b6b2191e332cbebc9bd870988a7fbce6d254532205b3ff6af862083a0f975c3e2960adf4b2f3982a1
SSDEEP
1536:IykzkagsXKRfKq7MWd3LYJOgjnKnLPokAQ8m8teI1vsEPn:IFzkaZXIZ5YJHjnKnckAQ8m8bXf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ