CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a601b5bb21e243f1233eae0aa4fea187ecb5452e71a0c4c5a968c52115f1d7e9.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a601b5bb21e243f1233eae0aa4fea187ecb5452e71a0c4c5a968c52115f1d7e9.dll
Resource
win10v2004-20221111-en
Target
a601b5bb21e243f1233eae0aa4fea187ecb5452e71a0c4c5a968c52115f1d7e9
Size
76KB
MD5
e2dc1392ab26dc6f4a849d40f24abaaa
SHA1
f5478a9f790dffefab621e57126dc16f3da0d96e
SHA256
a601b5bb21e243f1233eae0aa4fea187ecb5452e71a0c4c5a968c52115f1d7e9
SHA512
50da9f20a91d26e8a1dfe4a31b357bd73d1b4577af30ca0354855bc462ffb19fed817c3a37746c78d725f0e888402dffa638c40e80aa9581f0804029aae17096
SSDEEP
1536:Iykzkag9BS6TXbyXOPSZtiTfa024Ksccl55eF2qHwZ8rBl1jG3AX:IFzkaYBpPTf124N/u2qHw6tlBG+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ