CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0f058d3d6c64e402ab4e9b118cd1bdc0203d4070fb1f52a32d7ebe6d4052bd03.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f058d3d6c64e402ab4e9b118cd1bdc0203d4070fb1f52a32d7ebe6d4052bd03.dll
Resource
win10v2004-20220812-en
Target
0f058d3d6c64e402ab4e9b118cd1bdc0203d4070fb1f52a32d7ebe6d4052bd03
Size
64KB
MD5
6850f329163b9e928a2d38c3d7a7d418
SHA1
0c1a10b67fa1f1d0cf490ab9a5a60808f5202b17
SHA256
0f058d3d6c64e402ab4e9b118cd1bdc0203d4070fb1f52a32d7ebe6d4052bd03
SHA512
9489b1e85e0b4c84ebfcbefac01649de673ee6ef340c9c1b3df6ece8724700a5747ce235148413946600d7f5a7cc61933ddb4276ba8cea744acf3216aea3bcbf
SSDEEP
1536:Iykzkag1kjC8adGrF/IHIacJ7b8r5uD9DsM1CM:IFzkaBadGrVIHZv97ZM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ