CancelDll
LoadDll
Behavioral task
behavioral1
Sample
948954a977fccb8542e0c36e201017faaa2fe75bb75de61a1243254b7786f3e3.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
948954a977fccb8542e0c36e201017faaa2fe75bb75de61a1243254b7786f3e3.dll
Resource
win10v2004-20220812-en
Target
948954a977fccb8542e0c36e201017faaa2fe75bb75de61a1243254b7786f3e3
Size
74KB
MD5
c1e7fcf162916baa074fa348e649b61a
SHA1
45589fab76ffd72bd28ef9fafadb80c5b10e2cbe
SHA256
948954a977fccb8542e0c36e201017faaa2fe75bb75de61a1243254b7786f3e3
SHA512
55cb5e82a3419c52cd65f1f9636bce95fd9ff135afd234887a823d99605ca472f1fbdf5b84190780df141dcc81b5b273077160f87b7f15511e434518417e49a2
SSDEEP
1536:DVV1HTc5pBiu243Tg0vyQClHG15O2pzJoGGXM0GACW:DVrgp5yQCF2pFolMBACW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ