CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a5b292a83bd4a992f2688aa39380769034d3d78543ab2c8d94b94392882f9710.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a5b292a83bd4a992f2688aa39380769034d3d78543ab2c8d94b94392882f9710.dll
Resource
win10v2004-20220812-en
Target
a5b292a83bd4a992f2688aa39380769034d3d78543ab2c8d94b94392882f9710
Size
70KB
MD5
9c7f9f5412584529c1dfe519792e8762
SHA1
f14ad71b781d4935d57ac757a931d3a9b5af5eef
SHA256
a5b292a83bd4a992f2688aa39380769034d3d78543ab2c8d94b94392882f9710
SHA512
1d15a4fc74a18922be8bb1acd0e3bbce6b00ca6a7d9c6bf3dcef02b748f8dc21008847daac065dc569017a74997c24330e63e957a919307b7c5d29e40d14ee11
SSDEEP
1536:OsuX6JNx4kzG45Pu51rLdNQTqM4SbiEdnCaHPsZ6YqR:1/bx4uZ5Pu51lSz4GianHvQeR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ