CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b9354ddfba963742b27289dfd2112f913213e4c5ffac03fb9a97fd62c1cb1f36.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9354ddfba963742b27289dfd2112f913213e4c5ffac03fb9a97fd62c1cb1f36.dll
Resource
win10v2004-20220901-en
Target
b9354ddfba963742b27289dfd2112f913213e4c5ffac03fb9a97fd62c1cb1f36
Size
49KB
MD5
23e601f73ce192112f1d171ccaf9853b
SHA1
6f576f29f725abc39a601debd37666e4eb55630d
SHA256
b9354ddfba963742b27289dfd2112f913213e4c5ffac03fb9a97fd62c1cb1f36
SHA512
c8cdefaf1421dae524e0e816239c9805ca8060eb9f670eb93346708623bb836f83015d10d6801cb7621b89307f2e12a1c41c5e9adf3f5d778f589ab9727825ce
SSDEEP
1536:wAceoINVALS/SJ7XnSREP99CGgXUX/+bi5Qd:wAcTqGfJ7P19Z2c+bEQd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ