CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b4d0d15168d674fa57e6ed3024894e70ec31afeae683e7610cf442503f65830b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4d0d15168d674fa57e6ed3024894e70ec31afeae683e7610cf442503f65830b.dll
Resource
win10v2004-20220812-en
Target
b4d0d15168d674fa57e6ed3024894e70ec31afeae683e7610cf442503f65830b
Size
77KB
MD5
756ac37796e7d8891752299f828be9e0
SHA1
697c9d5eec332769fd2c5f0a86e684ea445d8193
SHA256
b4d0d15168d674fa57e6ed3024894e70ec31afeae683e7610cf442503f65830b
SHA512
a62291a3390e2916b848dc58e2919e69ea769f33c1eb86d82a3777c5e812eebc4be611c3de4a17bb88a22caf5404f15dd5680f914cf1137ec9ccddcf7717342f
SSDEEP
1536:IykzkaglvDMIurRvCvwYDVOYY1OFVeFjrASFwhky1AYE:IFzkaghu96vwYxfYkvOHCky1K
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ