CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bab62d3283bc9d1759c13c61682d3be53178972e52d8bb5bf280aaab0e17df4b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bab62d3283bc9d1759c13c61682d3be53178972e52d8bb5bf280aaab0e17df4b.dll
Resource
win10v2004-20221111-en
Target
bab62d3283bc9d1759c13c61682d3be53178972e52d8bb5bf280aaab0e17df4b
Size
64KB
MD5
e160cd5e2d28cbaee3e911be8fb88433
SHA1
16e049b52bbb1f06eb033183f1c91864aafaa5ac
SHA256
bab62d3283bc9d1759c13c61682d3be53178972e52d8bb5bf280aaab0e17df4b
SHA512
1513ca4d1ca182fca164272d0fc45ebdab84051124a1a72bd088bfef50a7827c45eeaf4462e528dfcfb1f75139f1e4dfee8348f0341c238fd2e5e0f788d9cb35
SSDEEP
1536:R754d6oFozTMFOJdXUfcsZF9K6xTSkVXpyiy1KqWP:R754foz4AdXuZ1TSSZ/yw5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ