CancelDll
LoadDll
Behavioral task
behavioral1
Sample
991f7d029e564f08fc036ce864105b335594e6d324c9e6f02f35d73da0b2bed7.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
991f7d029e564f08fc036ce864105b335594e6d324c9e6f02f35d73da0b2bed7.dll
Resource
win10v2004-20221111-en
Target
991f7d029e564f08fc036ce864105b335594e6d324c9e6f02f35d73da0b2bed7
Size
62KB
MD5
a3c60195a1114f74c938e2ddef084746
SHA1
0fb34fd182e5b71fa7488db8c026a723e3fa0d59
SHA256
991f7d029e564f08fc036ce864105b335594e6d324c9e6f02f35d73da0b2bed7
SHA512
c61408afe79fdc0467fa279df6b5e050a47f1771efa04f3014e765b1ba016b5a8a5d0c653fac0402a51b0cc394da612f925f1aa595f3ab10616ea7ce510284d5
SSDEEP
768:n2W5cWMGXUJOHgvP7VgMzFpxNb+tsfs8T4zf6YldYW0jc1ZF4lpji6rfNieRCpZp:2ndGX4pxrT4zf31ycORrFi1ZT6ccuR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ