CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cbf81f75aa5e2a8d032b77b785215581235d5e35530ace500f34ee35d27b3637.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cbf81f75aa5e2a8d032b77b785215581235d5e35530ace500f34ee35d27b3637.dll
Resource
win10v2004-20221111-en
Target
cbf81f75aa5e2a8d032b77b785215581235d5e35530ace500f34ee35d27b3637
Size
66KB
MD5
c44d69cf84d905175630760fabbd0e9b
SHA1
3c82a65104fa639cc48803db783038d4c4dbb9eb
SHA256
cbf81f75aa5e2a8d032b77b785215581235d5e35530ace500f34ee35d27b3637
SHA512
823b3ff59599a8f8868465731f9da80c8e2d84e6d541fe732f6dffee6bed2d25fa03eb23641c284f1dace6b5d3ef28ca96d0f2074c5e574cfd737280de55dafc
SSDEEP
1536:wAceoINVALbwAcotjziHt9yRPbg60/mEKCrRB1FF1pRyWoM:wAcTqGRziN9yRPcbRjSWd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ