CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f11e8cd8db4edfe6e8e82d48d25e8848374168dce893eea4f4db4b83373c555a.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f11e8cd8db4edfe6e8e82d48d25e8848374168dce893eea4f4db4b83373c555a.dll
Resource
win10v2004-20220901-en
Target
f11e8cd8db4edfe6e8e82d48d25e8848374168dce893eea4f4db4b83373c555a
Size
56KB
MD5
039b19c7c0804d9d11a4f7b2bc7bbc80
SHA1
afed8a3b43460ec57b8ec22632fa355e5efaf931
SHA256
f11e8cd8db4edfe6e8e82d48d25e8848374168dce893eea4f4db4b83373c555a
SHA512
c076c2f7a2ff85125d676bf82cae0aa81416d5f4fd3680f9b7c743fa42b112f1f691bf0b096076506298ebfc829da3950787edb9ec25395f43ca5f41218229eb
SSDEEP
1536:wAceoINVALkzaOmLsn/znXhX4A/P9uHe3s2:wAcTqGkeEznxX4u1W2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ