CancelDll
LoadDll
Behavioral task
behavioral1
Sample
97b293178960fd71070dfd6d66885cdf86013b66297a25f5f951e9b5a31f9de1.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
97b293178960fd71070dfd6d66885cdf86013b66297a25f5f951e9b5a31f9de1.dll
Resource
win10v2004-20220812-en
Target
97b293178960fd71070dfd6d66885cdf86013b66297a25f5f951e9b5a31f9de1
Size
54KB
MD5
0cb7944c3a7e42205b856cd23e9db407
SHA1
08cdfcb564ac7e5c931083f031b1fa02c9305f5a
SHA256
97b293178960fd71070dfd6d66885cdf86013b66297a25f5f951e9b5a31f9de1
SHA512
a14b61f35990e6cfec617b43ff7ce38f682cf81622c63fd2a6f9ed6c4a7247b9a2b761ed8503025b23732670b977d6f4cb250664de45ee2dec3df2ffce3fd5be
SSDEEP
1536:MicF5wd9/5K7f8S9E3H0ewm4BKzuybnn/A2B3J:EC35K7f1UUJX8bnnNB3J
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ