CancelDll
LoadDll
Behavioral task
behavioral1
Sample
efea53076d354ead19fbe12b80d7f9ab33005ccd6e0e772f1259691091c2cef9.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efea53076d354ead19fbe12b80d7f9ab33005ccd6e0e772f1259691091c2cef9.dll
Resource
win10v2004-20221111-en
Target
efea53076d354ead19fbe12b80d7f9ab33005ccd6e0e772f1259691091c2cef9
Size
67KB
MD5
59d17bf49961061f19f53384f01f7f2d
SHA1
b99d00e06e5bac30664588ef2d78ba16a5c7b191
SHA256
efea53076d354ead19fbe12b80d7f9ab33005ccd6e0e772f1259691091c2cef9
SHA512
bab14b5d115cd00efb4abf9d2675196ce99563a7649201e703cb6192f84f0d215101a67044202e43874601f015185475e68067ee1de25a4b65924cfa968d5458
SSDEEP
1536:Iykzkag19KDRZDcakF79dl5EjFrEFuypRmBBRSBq:IFzkaS90RC579dl5EjZEF/2tSBq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ