CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a602c40353dddde0c1b706ebbcee393a76179dd25e7d70ff9d003f922d9b44b1.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a602c40353dddde0c1b706ebbcee393a76179dd25e7d70ff9d003f922d9b44b1.dll
Resource
win10v2004-20220812-en
Target
a602c40353dddde0c1b706ebbcee393a76179dd25e7d70ff9d003f922d9b44b1
Size
51KB
MD5
dc7cae979d799a26a3fa8f901625e33b
SHA1
6db194bb5d27b0d0d65fa9009dd2195899807dd1
SHA256
a602c40353dddde0c1b706ebbcee393a76179dd25e7d70ff9d003f922d9b44b1
SHA512
653ecdd84b43d8f912dba73a58e5cb4f0875caa7f01fe746b30ab03c81003f58a1b78460f6d6286318abc3c5a4ff89086afc04f46e376ea70cf1474560f60165
SSDEEP
1536:75ZXMityecq3gErkOPI67LZQLI6SJEF09M:9ZLncajbLZbM0G
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ