CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b0956e8a5581908927bdfb2582a6b4a117775f85708a9cb24be98a7afe471713.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b0956e8a5581908927bdfb2582a6b4a117775f85708a9cb24be98a7afe471713.dll
Resource
win10v2004-20220812-en
Target
b0956e8a5581908927bdfb2582a6b4a117775f85708a9cb24be98a7afe471713
Size
58KB
MD5
13536a699e10054e42436adce91abf44
SHA1
7d8ee11b1887a9f389f2a21d63d08b92c14f5780
SHA256
b0956e8a5581908927bdfb2582a6b4a117775f85708a9cb24be98a7afe471713
SHA512
e103b3c0c0a1551e369de674cc28e54f6dfad8cf3598be7b141a7d3068cce8a5a6ec6893895a6dbba3dd3a11f292d3c31711fa6621bef154ae71a0221364731c
SSDEEP
768:ZyVdVZgrkggLE37dtsSDhN1DIUAycbno50L/TQ4evBonBnODp8JvsVZzxmfU/Z:O/S0utsSDhN1D1cE50L/nOGJFU/Z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ