CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9615dbfab4730dc125a5c8dd163407c3d9e1cb5877ccb7815b192a8e5a1984bb.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9615dbfab4730dc125a5c8dd163407c3d9e1cb5877ccb7815b192a8e5a1984bb.dll
Resource
win10v2004-20221111-en
Target
9615dbfab4730dc125a5c8dd163407c3d9e1cb5877ccb7815b192a8e5a1984bb
Size
55KB
MD5
f6b064403f7389acd5615f73c954fda3
SHA1
001a52aa9769967721f4d5a77b44656b6024555f
SHA256
9615dbfab4730dc125a5c8dd163407c3d9e1cb5877ccb7815b192a8e5a1984bb
SHA512
37ccd7158d9404e50e4121f577dfaf679966d5677524d500548f4be1a18c20822f053f254f0413814d4739b22bab1c4b6b95d3e67a2e82e4ce37cca787f41ccf
SSDEEP
768:IykIwePd8g7dHQjan/T3B+OWEEluusfeRQ93bun5B0JPZtfH589:Iykzkagm2l+JRLRQ58CFjB89
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ