CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e125b03774965c66bd15cb9c7bc117943138b89e8959b6e5248a6495c9496a5b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e125b03774965c66bd15cb9c7bc117943138b89e8959b6e5248a6495c9496a5b.dll
Resource
win10v2004-20220812-en
Target
e125b03774965c66bd15cb9c7bc117943138b89e8959b6e5248a6495c9496a5b
Size
70KB
MD5
ef9930a17f97c39d8c05a58130fd20bc
SHA1
ff11d27acb3df5bd2b6f564a0313c7fabe2a8c6f
SHA256
e125b03774965c66bd15cb9c7bc117943138b89e8959b6e5248a6495c9496a5b
SHA512
daaa491f955c4eab4b1cceef9205187f97df86b60a1b504661662353b0f813dabc136fca57ad036638d483a168ccd09c76dc3aca6b558f347ec8c6768811c2d1
SSDEEP
1536:jS4eYKFt0J0p2RLaHqWj+korSiGEEF6KJluJ:+RzvK0ebWTorodFZ32
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ