CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cc89b4f1f73a4ffbd8bf6efd2cbcf8276e6e35612d25e35800f1e539f6ddd17f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cc89b4f1f73a4ffbd8bf6efd2cbcf8276e6e35612d25e35800f1e539f6ddd17f.dll
Resource
win10v2004-20221111-en
Target
cc89b4f1f73a4ffbd8bf6efd2cbcf8276e6e35612d25e35800f1e539f6ddd17f
Size
56KB
MD5
b052f7cf32e52c3a7202f4c8330bd2aa
SHA1
0ee2abe0f6b92f27e5070672b490580de0c7365e
SHA256
cc89b4f1f73a4ffbd8bf6efd2cbcf8276e6e35612d25e35800f1e539f6ddd17f
SHA512
1189bd42fec65fd55791a9f829d563ebf7ea628953e4439846ba6a3c3229d615f2535338a8fbce870fe0187520c46734215626098b9931d524dcfbb676ff5712
SSDEEP
768:IykIwePd8g7dHLSCcs3LOoUBjIKOi+HUxAnaVIN01tJSYMMCnYI2KVEGyLFu714+:IykzkagxntbOnIpYb0AfCnUo5ueGY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ