CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b6cdb72e3327c108fb0c2fef6ca186a34b7bca681e583659872ee0d891eeafd8.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b6cdb72e3327c108fb0c2fef6ca186a34b7bca681e583659872ee0d891eeafd8.dll
Resource
win10v2004-20220901-en
Target
b6cdb72e3327c108fb0c2fef6ca186a34b7bca681e583659872ee0d891eeafd8
Size
55KB
MD5
b9e586d9eeafa2c053060fae2d1c3d36
SHA1
d0b7fdd5eb896193148cf63cda63061a04e42e39
SHA256
b6cdb72e3327c108fb0c2fef6ca186a34b7bca681e583659872ee0d891eeafd8
SHA512
8b5a37a004947a7197347c379e58af746ead1084984668e8c9e8b03d246b2775fed895d5532fe01f52290cef4e70e20ca37af5cae8db98f86fa1b6b5ef754e08
SSDEEP
1536:V6/jx4irvuWiYTjbKIkKZgVcBxLnigMij4kmVl8:V6d4iEYTf3McBxEe4Pq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ