CancelDll
LoadDll
Behavioral task
behavioral1
Sample
aceded36e777d96e7f1e22b12d4d6931ea27dd5717ea6ec23c7a34ad8c93ef01.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aceded36e777d96e7f1e22b12d4d6931ea27dd5717ea6ec23c7a34ad8c93ef01.dll
Resource
win10v2004-20220812-en
Target
aceded36e777d96e7f1e22b12d4d6931ea27dd5717ea6ec23c7a34ad8c93ef01
Size
63KB
MD5
f94ca5b04d7bd89d5250d01662b3ce43
SHA1
5abb363683a833ecbab04723814a7a6d56425095
SHA256
aceded36e777d96e7f1e22b12d4d6931ea27dd5717ea6ec23c7a34ad8c93ef01
SHA512
6f278500675c59037e3df0627a3361bdffd0e425bc8e5291e1b66c52fe6f9d501ebf031cd422fc0ea1ca891174adb28dbf5bc759fb722139e2b15007ffa00ee1
SSDEEP
1536:OsuX6JNIwBUVFnQMwEUsHXXPu5khOK1o+ae1Io0twwO1DPicu+h:1/bIwBAmMwRu/uMOMXI5twwO9PilS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ