CancelDll
LoadDll
Behavioral task
behavioral1
Sample
68aba5c54c173f273e8462f52c0a3b9ded3a4f95f27f8bc0c2e20d8f1375b672.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
68aba5c54c173f273e8462f52c0a3b9ded3a4f95f27f8bc0c2e20d8f1375b672.dll
Resource
win10v2004-20220812-en
Target
68aba5c54c173f273e8462f52c0a3b9ded3a4f95f27f8bc0c2e20d8f1375b672
Size
53KB
MD5
446ee4abaed3fa3099456ff35ee28730
SHA1
6787c95ee3f43777167264362e373d9003e9a272
SHA256
68aba5c54c173f273e8462f52c0a3b9ded3a4f95f27f8bc0c2e20d8f1375b672
SHA512
b60ef66a2ad09f4c778114f7331f2a5e1fe74a8dc34065f2765e535d869093d87188db0990a506c39b75e20ee1a2288f6337959f4061526e1011d1536b51f0a6
SSDEEP
768:IykIwePd8g7dHv8fkWDF71i6SvRIwzLQAx5XVsYNof0mbAoW0Ozjqxt8DWPS:IykzkaglRWDa64IkQC5kf0o/ZOQPS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ