CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8ff0f43cd7375995d8c0677e605efed8293753a944ff93172f185d4bb254795b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8ff0f43cd7375995d8c0677e605efed8293753a944ff93172f185d4bb254795b.dll
Resource
win10v2004-20221111-en
Target
8ff0f43cd7375995d8c0677e605efed8293753a944ff93172f185d4bb254795b
Size
62KB
MD5
1e0e06bc1d0a33d691886b1e931756a0
SHA1
679f9cd32e69b91624a4112fb4b03e8a2feef593
SHA256
8ff0f43cd7375995d8c0677e605efed8293753a944ff93172f185d4bb254795b
SHA512
55dc0a5675024bbcd590456ff9162c7f8c2c32596c5d8621a5eb9b0b3d6b174e6c9f4b46549cf745528bdf85bb9f83038971099849aade07040ff72d5421b211
SSDEEP
1536:+gK4oX3tbo2KoLYZhi/Oso0ioXjYOmwyYYh0xMI6MqX:i4Cuni/OsoNrwyYY1j
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ