CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bd277891387d4394fe0b07f168af33792a201c36f86db81fd7435f970c7510f4.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bd277891387d4394fe0b07f168af33792a201c36f86db81fd7435f970c7510f4.dll
Resource
win10v2004-20220812-en
Target
bd277891387d4394fe0b07f168af33792a201c36f86db81fd7435f970c7510f4
Size
62KB
MD5
b27ea47aff0fb92540e912a6f836a0a6
SHA1
91c04766291dc694e24844706346d8ce60446716
SHA256
bd277891387d4394fe0b07f168af33792a201c36f86db81fd7435f970c7510f4
SHA512
3b013a45cb3d5b534036cab3f02f3c6f5695674ba414253f9b837615d9d69c7e5e066a8c97abe0d1661774ca10ddb8622b77a6ea2af9b8c3d58975f29cb2dbac
SSDEEP
768:IykIwePd8g7dHhYJpQU8AJpz5eyfK0+/OkRekwiWioIYx/eNmXWJeXBgAvVkmkP:IykzkaglByfK0+/HRhwiNNmXWIBg0oP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ