CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ca8376252ea18340b07bc1747381089906fefc241643e32f0a0c24a0d6da6805.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca8376252ea18340b07bc1747381089906fefc241643e32f0a0c24a0d6da6805.dll
Resource
win10v2004-20221111-en
Target
ca8376252ea18340b07bc1747381089906fefc241643e32f0a0c24a0d6da6805
Size
69KB
MD5
7b99bc3b5175a997614eb60e1323ba4a
SHA1
f82931e0e86984239222065939798276744c5cf7
SHA256
ca8376252ea18340b07bc1747381089906fefc241643e32f0a0c24a0d6da6805
SHA512
c560457330cf2a9a415bb67740eea27e136d8fb0597ad003aff24bb016d4725349f4d3993be3c9a3d6de7f436e4b2af853f3967e69ba449065fa8774f4be7f75
SSDEEP
1536:yok0mU99/d8nAOj2Mnn1LaJXOyzC03hZP/EIcKjbXQuk2W:/ma/kAOj2M1La4MvhZPMIcKjbgkW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ