CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ad5fadc127c4c3ea758784e36be1cb3135225a552eb2416e98a8a3eb13076d46.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ad5fadc127c4c3ea758784e36be1cb3135225a552eb2416e98a8a3eb13076d46.dll
Resource
win10v2004-20221111-en
Target
ad5fadc127c4c3ea758784e36be1cb3135225a552eb2416e98a8a3eb13076d46
Size
52KB
MD5
75d41863f17917366d1bb907fda97817
SHA1
60c046ceea9c4943fa2740ead140ff984e6da953
SHA256
ad5fadc127c4c3ea758784e36be1cb3135225a552eb2416e98a8a3eb13076d46
SHA512
1b34d45500de2f3500329698e40103d48681449e6256d6b6c717fcb778a240ff045634ffe98d4d1b74908703d889c90cf75c0751bee7489c29fb13938682e6a2
SSDEEP
768:F2nKORX5J1O8OKw+MsWSlqS2Tt2SYwhvfpk6zTogPEcsN4BUJwWKmHFSYMN2cKSk:knK0jhOKw+HryYqX66dPVsNgUJUlk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ