CancelDll
LoadDll
Behavioral task
behavioral1
Sample
74e8d82b59dd494ef6ff194dd9995c31cd04cb22d78fd60b5d7b39a1d9cbb685.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
74e8d82b59dd494ef6ff194dd9995c31cd04cb22d78fd60b5d7b39a1d9cbb685.dll
Resource
win10v2004-20220812-en
Target
74e8d82b59dd494ef6ff194dd9995c31cd04cb22d78fd60b5d7b39a1d9cbb685
Size
57KB
MD5
569be374ff7e4b79e42e56c92af60557
SHA1
00c0d2a6f7d8f8b518c7186959547df3de5ea236
SHA256
74e8d82b59dd494ef6ff194dd9995c31cd04cb22d78fd60b5d7b39a1d9cbb685
SHA512
45a6cb5ba006c7a41a80c4673b7c33959f35f681f5e13b1fb9fcdfd80c1edf3946d22b576363bfd6aae5ed3c55d1e1ec7b80ca30abdeb2abad1aea4cd1e079a4
SSDEEP
1536:zJB4wnVaSZUKRiL05rXAZk5ZGEz72H++G+MrgK:BaSZo05rXv5lenK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.