CancelDll
LoadDll
Behavioral task
behavioral1
Sample
acc0cff2ee2ad344a3332f461b2d46b87cf650038daec5c31bd003e1fe1d5bdb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
acc0cff2ee2ad344a3332f461b2d46b87cf650038daec5c31bd003e1fe1d5bdb.dll
Resource
win10v2004-20221111-en
Target
acc0cff2ee2ad344a3332f461b2d46b87cf650038daec5c31bd003e1fe1d5bdb
Size
50KB
MD5
3e86e321f83ddca0405c9b4c6e07d95c
SHA1
03724387e16117daa8fe6e9661eccf7dba523ee7
SHA256
acc0cff2ee2ad344a3332f461b2d46b87cf650038daec5c31bd003e1fe1d5bdb
SHA512
d21aee219ba65c8aee7b41f914e81e2c206f8895414beea687eb8725f555262effb3543b082c3c4fe1f2af771daf5662c6645ed90dfc6644d6b8b2aa62b47825
SSDEEP
768:4I8VNN45VfZ4gT1g0LLLLLLLLLLLLLLLLLLLLWhCJAsGDuULEE269Id8OxrS7p6I:4IoC5VxRhg5stUoE29BYDdOL8f
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ