CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bd6c89596b78ebb7802dd70296cb5282410dd66ef910f78906999338c510b875.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bd6c89596b78ebb7802dd70296cb5282410dd66ef910f78906999338c510b875.dll
Resource
win10v2004-20220812-en
Target
bd6c89596b78ebb7802dd70296cb5282410dd66ef910f78906999338c510b875
Size
68KB
MD5
5469f999b4cf6693a9849851d157f117
SHA1
dadffd02535654a0bcb2b464ebd900a94a462c0f
SHA256
bd6c89596b78ebb7802dd70296cb5282410dd66ef910f78906999338c510b875
SHA512
f9d885d5dcbbe663fa1ec692772c5badaa24730a274c13a5aa2207a731ba645838d1a89333951d66c25dc52d14dd81b9084968a9237040a1f395c98e78b33658
SSDEEP
1536:IykzkagAlYy50/rplZeVh1CU1RnJUMQHIvqQVTAfcZ5:IFzkaLm9XS1/LQHDiTAfcZ5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ