CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d8c601acaf3e687449eeb022fd30aee7b667ff2809c9aefc897e2f4a25c39fb5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8c601acaf3e687449eeb022fd30aee7b667ff2809c9aefc897e2f4a25c39fb5.dll
Resource
win10v2004-20221111-en
Target
d8c601acaf3e687449eeb022fd30aee7b667ff2809c9aefc897e2f4a25c39fb5
Size
55KB
MD5
6760568aa3a2467ff963e3e5a8afaf13
SHA1
2d2beb549bc6c9d3e3885dc43e336521364b7c7a
SHA256
d8c601acaf3e687449eeb022fd30aee7b667ff2809c9aefc897e2f4a25c39fb5
SHA512
61cec1c1f361860598609f9432c74086db8922cfb38fd1df98930e373c1bc1f93932af692155bb509f1a4be0b4eea35aa2b795376d8175788822f0e2b88b6262
SSDEEP
1536:IykzkagGtjSlxIEpGIA+iFfUl12ExNekgn:IFzkaPtjwUIA+/f2CQH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ