CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ee4c80a2dd6fe943ff44325d3f431b8178e40007b95891e475de43ac2eff4ff9.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ee4c80a2dd6fe943ff44325d3f431b8178e40007b95891e475de43ac2eff4ff9.dll
Resource
win10v2004-20220812-en
Target
ee4c80a2dd6fe943ff44325d3f431b8178e40007b95891e475de43ac2eff4ff9
Size
76KB
MD5
5d1e1d1dfe96483eb04cf5dc4c5ed7ac
SHA1
33e560ae0e8e54dae914e4ef15b73f35c6029a75
SHA256
ee4c80a2dd6fe943ff44325d3f431b8178e40007b95891e475de43ac2eff4ff9
SHA512
c979e170cacfe69926c325a181c0fb3756478e799cfd285a0eb3e93744944efc197b11af5e5fde9e0cac19f730bc94d00dadb9c4b9c418638ef23ce825c02077
SSDEEP
1536:IykzkagwkuSAGGTOuc7suiOXfuQl8oW8xLZqolk8Fo:IFzkaquP7SuZhiuQdHy8i
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ