CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e19ed2219a63b1a6ea267e5deb8b02528d779fc1c27540051982051f9628d5b1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e19ed2219a63b1a6ea267e5deb8b02528d779fc1c27540051982051f9628d5b1.dll
Resource
win10v2004-20220812-en
Target
e19ed2219a63b1a6ea267e5deb8b02528d779fc1c27540051982051f9628d5b1
Size
62KB
MD5
b31dc764f90a4c52ebd09b14dadda082
SHA1
16cb265eb0022f2afae4db610c6094554c3401b8
SHA256
e19ed2219a63b1a6ea267e5deb8b02528d779fc1c27540051982051f9628d5b1
SHA512
c7fe33502b2e2b16cdc4d4c91fc849a2399c9e5ddb238bde40ef4fe3900556203de683d0e9b14c7896afde87ee51c84de227d06ca8036a37e615db3d82c79864
SSDEEP
1536:IykzkagPEkonYbqezKMltwqoylUFd5dBOMSCbRHsp90AI5:IFzkaconletbwH2e73SCFHc90h
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ