CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f2a1571a29909690a04dd94d49cb7d0c6e806d73e0bd552b524ca71af7be4924.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2a1571a29909690a04dd94d49cb7d0c6e806d73e0bd552b524ca71af7be4924.dll
Resource
win10v2004-20220901-en
Target
f2a1571a29909690a04dd94d49cb7d0c6e806d73e0bd552b524ca71af7be4924
Size
66KB
MD5
ca60690f4878023a0681113ad6aa49de
SHA1
54540aa5f7f93cfc29bd603c686b480f49a9291d
SHA256
f2a1571a29909690a04dd94d49cb7d0c6e806d73e0bd552b524ca71af7be4924
SHA512
3ba32065c6ff7af17c65645aff6638bfbf7e2da601efb3fb4448359e1d66cf01641a8b96d9324ef6c476f4e9b8d3df1723f8ca77bfb6619e62b4a5e282a95668
SSDEEP
1536:GEnkm5+WVF8HxP2Rn2KXz2bOJA8wdNNBUaeFIg4wyRS7:GExfH2xP0nfkmgdNNBsFIg4w5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ