CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a2f834bd85f15250757140a4fea2a9cdf9c34a6decc0c0ba89f8ee162b59965f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a2f834bd85f15250757140a4fea2a9cdf9c34a6decc0c0ba89f8ee162b59965f.dll
Resource
win10v2004-20221111-en
Target
a2f834bd85f15250757140a4fea2a9cdf9c34a6decc0c0ba89f8ee162b59965f
Size
53KB
MD5
6f70279cbe70a227fe8b645ff8ad54b0
SHA1
95d1b298b3677a425c9a445208662732c2add373
SHA256
a2f834bd85f15250757140a4fea2a9cdf9c34a6decc0c0ba89f8ee162b59965f
SHA512
1f8b4bbaa695539454eaa3f8dff2a51f381591f429351ce84336d0bd49dc3b8eba75e98637396775b770d6e4b47013ff42a70988ed5a5da68bcae69d65fb7290
SSDEEP
1536:wAceoINVALam9N8U6gWLwrwhPfOH/YzMo87JXuXF:wAcTqGao16gWLrh2fYzGJmF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ