CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ffc3b3af88961da125fbfa79dcaa6c0c0cbc115456114c433e9d9efffa141624.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ffc3b3af88961da125fbfa79dcaa6c0c0cbc115456114c433e9d9efffa141624.dll
Resource
win10v2004-20221111-en
Target
ffc3b3af88961da125fbfa79dcaa6c0c0cbc115456114c433e9d9efffa141624
Size
65KB
MD5
1bed31c6824a4fba43661446cfa236c0
SHA1
28979d88d419d9fc42e192bdc6976e07f014c96a
SHA256
ffc3b3af88961da125fbfa79dcaa6c0c0cbc115456114c433e9d9efffa141624
SHA512
d4e110f8ed2f3041b4ec52901259f40d9668853b914cd7e09b7a310e03b39523e3dc4781917190257c2eab1543b8482a4e465c8d43452db423fb99fed7282387
SSDEEP
1536:DkYOATOMt5ncPjR+QD9dMumR4p1Ym4JYG20qb:XOATOMt5nmjQM9SuAVrWb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ