CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bc87f010538d13ca91d82e608ea7554ceb19e0cec9daa8c51afcd2a2704c3051.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bc87f010538d13ca91d82e608ea7554ceb19e0cec9daa8c51afcd2a2704c3051.dll
Resource
win10v2004-20221111-en
Target
bc87f010538d13ca91d82e608ea7554ceb19e0cec9daa8c51afcd2a2704c3051
Size
73KB
MD5
61fdfd41f537e81cd0a6bdbf0abfac2f
SHA1
4e1b057518548182a9c58cb5592f0b14cd526be8
SHA256
bc87f010538d13ca91d82e608ea7554ceb19e0cec9daa8c51afcd2a2704c3051
SHA512
9f6c2a915dac04c3ccc9feeef6e5bf107bdb52da1ea18ea3aace973e08ecc052ed70e6f2958e1e6a0b75928a0119d4409101a65e35b18f59f3dd8acf937d9dcb
SSDEEP
1536:IykzkagfZsew6GiUcWjmCyGUwUSg9CZZ0XFJRu0Pbq:IFzkaeAyUcWjmCy6OCZ+bbq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ