CancelDll
LoadDll
Behavioral task
behavioral1
Sample
90adceb35903c01c7a38c398d799792684dd1eeb258c4afb6b5dcee9c9df68d8.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
90adceb35903c01c7a38c398d799792684dd1eeb258c4afb6b5dcee9c9df68d8.dll
Resource
win10v2004-20220901-en
Target
90adceb35903c01c7a38c398d799792684dd1eeb258c4afb6b5dcee9c9df68d8
Size
61KB
MD5
3200c5554ef5224364e147799a3d83ab
SHA1
4e08f2718554c14e8880b3e9904b61048bbe5100
SHA256
90adceb35903c01c7a38c398d799792684dd1eeb258c4afb6b5dcee9c9df68d8
SHA512
cd13cbc4a191b701eb91daf3781a7a3b6c845dfc5e280431dc1027bd25d701d0c315c616619d217b06ce85a40e63e236609899de29d2fe5f271a70f71e49af01
SSDEEP
1536:BnkD/FwbiBJrm7Mvf5wRCnNMTDac+jVqf7g:5kDtueEwf5wRu+DIVqf0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ