CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c74a10eb22c1291f91566105b2d1f3810f0115cc3cdd237a23914063973cbce4.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c74a10eb22c1291f91566105b2d1f3810f0115cc3cdd237a23914063973cbce4.dll
Resource
win10v2004-20221111-en
Target
c74a10eb22c1291f91566105b2d1f3810f0115cc3cdd237a23914063973cbce4
Size
51KB
MD5
ed03f2b8d0138ad1f9e828c6ed286a7d
SHA1
f435036f36d076958c506a059197c21fadb3f6ed
SHA256
c74a10eb22c1291f91566105b2d1f3810f0115cc3cdd237a23914063973cbce4
SHA512
bf36402faa119a55b2b8b52e3812e168382cd311d47868de75f588b46d1d05f3feea910561cb5aaed322c0abefb1b16b286a34a14b640703c868dc4502ced81f
SSDEEP
768:IykIwePd8g7dHTRW3G/FFMs9ociyZGvCudEnDeJG8KG+swke29/:IykzkagNRW3cMs9oda6GKmP3U9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ