CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b63a6c5f061a5dce2cd982b5379626ed7ea1170be4a0541e3eec2843af7e7c06.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b63a6c5f061a5dce2cd982b5379626ed7ea1170be4a0541e3eec2843af7e7c06.dll
Resource
win10v2004-20220901-en
Target
b63a6c5f061a5dce2cd982b5379626ed7ea1170be4a0541e3eec2843af7e7c06
Size
75KB
MD5
54789d9716b4ae6cae0cdfb36703a139
SHA1
4249fd5fbb5f27a8a63c941dc86f0793cad6eda6
SHA256
b63a6c5f061a5dce2cd982b5379626ed7ea1170be4a0541e3eec2843af7e7c06
SHA512
052f4c8816e8224a3df701dae5c49b5b3e84e783c538113cf5bad163cc72c5cb59517bb7aff2fab45012a155dac57138d060906dad49e6b485b2d91558f29112
SSDEEP
1536:IykzkagK36QEZxWOkZMi/MBhXQyl6qysYYjrNmr/zbM:IFzka7GUMi/MDXQyl3f5c/c
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ