CancelDll
LoadDll
Behavioral task
behavioral1
Sample
68c3722875fb2a5e9ade56d92336e63bf9ff62a8f74c14892df8d9173422d444.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
68c3722875fb2a5e9ade56d92336e63bf9ff62a8f74c14892df8d9173422d444.dll
Resource
win10v2004-20220812-en
Target
68c3722875fb2a5e9ade56d92336e63bf9ff62a8f74c14892df8d9173422d444
Size
74KB
MD5
35ccd33c3e8986c4fb4bfba2a2c8a9ce
SHA1
f7a007e01f1b8eddc31a115a8f3168983939eb4f
SHA256
68c3722875fb2a5e9ade56d92336e63bf9ff62a8f74c14892df8d9173422d444
SHA512
b95264f3fe150ae1e65b4c76acfd32eb6e596fa93aadc3e3cb4bf37b863ab061bf410f0349f07d205c87b4b3dddddbbbb1d44ccba309cc7d668a84e90f52769f
SSDEEP
1536:IykzkagB4DCu+9IJwfi8BR828iqJZRnAUZ+E5SiqY/hLw1u/:IFzkaY+Qy+P8dJZWUIEfqABw18
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ