CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dc9705d65428a9de76cd07afde2d0f6d9e9f3783cc192a13404b10275a4cfb71.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dc9705d65428a9de76cd07afde2d0f6d9e9f3783cc192a13404b10275a4cfb71.dll
Resource
win10v2004-20221111-en
Target
dc9705d65428a9de76cd07afde2d0f6d9e9f3783cc192a13404b10275a4cfb71
Size
69KB
MD5
a8f1e551d377d10b23506e0f0b15e130
SHA1
29c1bfe7bc0205dffd93ad147525a152813dc14c
SHA256
dc9705d65428a9de76cd07afde2d0f6d9e9f3783cc192a13404b10275a4cfb71
SHA512
931a622f52702c584482534fae897dfdd3ef411279807ba996c156acec57a5f0299687a05935f49d98caa29761fe5921dac318341631b4c7d252a6180c19b4a9
SSDEEP
1536:G/hdOU+bI98RnwTfpmsFPLv0YfsX8KAEI3DyfqweJ840I/DxVgOkphw:GpdOUYwThdtRsX8HEIucWYq5hw
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ