CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5c310ce9180f08ff4d0b46e1df716e32f72cb7b45d138d50709b52a1999d248a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5c310ce9180f08ff4d0b46e1df716e32f72cb7b45d138d50709b52a1999d248a.dll
Resource
win10v2004-20221111-en
Target
5c310ce9180f08ff4d0b46e1df716e32f72cb7b45d138d50709b52a1999d248a
Size
76KB
MD5
605acf6df6d9879617caeb03fe244d40
SHA1
3a3af6a9a24ab636658f2cfa0f32c69f5fec9d0c
SHA256
5c310ce9180f08ff4d0b46e1df716e32f72cb7b45d138d50709b52a1999d248a
SHA512
8f4e616910922a854dd2bc8fbf0a384e328222fb2df5a46cc5f9cbc17387af1c5f980ffb1ee1b9394aedc01aae51ab45d93f07ceac59c6691bfe9e96db2241e4
SSDEEP
1536:t5B0Jq2IBxAQP4Mpy7o1t4KD522PtVEw0mWf6IeDxkxFh8qgQY7:tjTb3P4Ky7o1yc22P0w0PyIemFh7Y7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ