CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ef3d39094ef03a22cf8a5401497ced4e6143f4e4b02b92b1b21c82a0225fb599.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef3d39094ef03a22cf8a5401497ced4e6143f4e4b02b92b1b21c82a0225fb599.dll
Resource
win10v2004-20220812-en
Target
ef3d39094ef03a22cf8a5401497ced4e6143f4e4b02b92b1b21c82a0225fb599
Size
70KB
MD5
580f41f7520cc33d4fa0b813f57d7970
SHA1
10ace0fdf45d73db0191d5afba22c91de08e6291
SHA256
ef3d39094ef03a22cf8a5401497ced4e6143f4e4b02b92b1b21c82a0225fb599
SHA512
76edbf460323a8a4c3a2b52de5e45140ad18dd8c3ee1060dbd900a1be9ee8889de6a2dd5fb9617eb06f25c89752221e62f02d46942bed7f1eb39334e94429271
SSDEEP
1536:IykzkagmzWWQUjNKhq42yW03o6rZDZjVT7ITYCE7y:IFzkahiWJCku3oAZDZjVwTYCv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ