CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cd5838d3f81094c543a9e0106eab1ded8cb8cdb968667b16cb0023db15499161.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd5838d3f81094c543a9e0106eab1ded8cb8cdb968667b16cb0023db15499161.dll
Resource
win10v2004-20220812-en
Target
cd5838d3f81094c543a9e0106eab1ded8cb8cdb968667b16cb0023db15499161
Size
62KB
MD5
578ac941b66c9efafc9a250f950c5ae9
SHA1
16e515b15985e62770f433419eccb99c6da09925
SHA256
cd5838d3f81094c543a9e0106eab1ded8cb8cdb968667b16cb0023db15499161
SHA512
1188a41709be606d23cee025411d90c0df7b3b47db43a96d1b325fc34b44a0eec179ba977cecda7c9926154dab0db5d47d9151242edb831f01f9e874402646cc
SSDEEP
1536:jS4eYuVaN0UPmGNTX8ytUaK5qUQ2BbE4WCS:+RuN0gH8oUawqUQ2BbEXV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ