CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9f7ef712b596757958a5b813685ea18ebe11d23aa3c894af14dd0f5db2bb5a20.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9f7ef712b596757958a5b813685ea18ebe11d23aa3c894af14dd0f5db2bb5a20.dll
Resource
win10v2004-20220812-en
Target
9f7ef712b596757958a5b813685ea18ebe11d23aa3c894af14dd0f5db2bb5a20
Size
78KB
MD5
77a08108537c233c4901157faca2d413
SHA1
c93aa18a105ddf93d763063bef96ac61e29c87e0
SHA256
9f7ef712b596757958a5b813685ea18ebe11d23aa3c894af14dd0f5db2bb5a20
SHA512
39f06acdfe793bd88ba79bb4c18bc15b473cc9890be763e1a6ef27f71f51414c55f91e7f69a0116caa7772dd3606b50ae90c6439c1170a49205e04916aadf79d
SSDEEP
1536:MicF5wd9/5K7rUEjjGOW6wUy58UrFgjE96cBKr24JM9mglcfz8:EC35K7rjjjAUyC6FQE96obgz8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ