CancelDll
LoadDll
Behavioral task
behavioral1
Sample
5331b65354cc07f0bd4376565ba4a5209c7466b0ca79287f43f67bbf9463ce1b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5331b65354cc07f0bd4376565ba4a5209c7466b0ca79287f43f67bbf9463ce1b.dll
Resource
win10v2004-20221111-en
Target
5331b65354cc07f0bd4376565ba4a5209c7466b0ca79287f43f67bbf9463ce1b
Size
56KB
MD5
e0dc5bb46f1a0c392444aaac419d3b10
SHA1
594f87b42556751ce4bb0cc443e0fefa04f880e6
SHA256
5331b65354cc07f0bd4376565ba4a5209c7466b0ca79287f43f67bbf9463ce1b
SHA512
ffe3997ff0d0413981c0d0701bc670cae26caaa716c3a752eabbe4090db7eceebf6f32bd286eea3772af6efe0a4fafd989ee2894e9f60ceefb9f58a0eb53757c
SSDEEP
1536:Bkvf2ibJ8xoN9JwY/zvpjNevTyN9Ftazyn/s8Am0yqn3Q6mKGS:BkW0JPdwY/z1GTyNIzRxm01TmKGS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ