CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d27f09772c7d50dc50af28f0d71022c6557c9b9c241268da2576228f4ebff14d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d27f09772c7d50dc50af28f0d71022c6557c9b9c241268da2576228f4ebff14d.dll
Resource
win10v2004-20220812-en
Target
d27f09772c7d50dc50af28f0d71022c6557c9b9c241268da2576228f4ebff14d
Size
63KB
MD5
161d444d7177149887194f7e590cdf4b
SHA1
cdb050cac59977e82ba630de53dc9bcbf4d84a3a
SHA256
d27f09772c7d50dc50af28f0d71022c6557c9b9c241268da2576228f4ebff14d
SHA512
da876a65bef3025657688762c8499e4f78b5d85b572dccb4f28ec721643f98c42e4a9acf8cd8e70a604b19b838e4937808169157938ec1f5c47ba5f6cee0e9ee
SSDEEP
1536:DWk1dx+vXe8ogOhf1Q8ElwhVUtjuWLJrzCDvn:SAPm6m8JQuWLJKn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ