CancelDll
LoadDll
Behavioral task
behavioral1
Sample
afbfaaefc3a6caa280c78c720e5bae2b1a5ec8c86df9fac52453f62cd773bc5f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afbfaaefc3a6caa280c78c720e5bae2b1a5ec8c86df9fac52453f62cd773bc5f.dll
Resource
win10v2004-20221111-en
Target
afbfaaefc3a6caa280c78c720e5bae2b1a5ec8c86df9fac52453f62cd773bc5f
Size
64KB
MD5
55d2c3ab571cb25ff45fed9571fe27bb
SHA1
6c7dbb02b671fd091dd1a1cbfd931c15d7042854
SHA256
afbfaaefc3a6caa280c78c720e5bae2b1a5ec8c86df9fac52453f62cd773bc5f
SHA512
b28ca4af97b62229f6ad6d0c8785b9b30fcdbcd01f0b1e9d9a56ff8262f26d28ea4305c88a06d8a0ed14156b26bfb53a620c8fb0bc4a379858681f4334eafff0
SSDEEP
1536:wAceoINVALeAdJWZVAUA4Um2D7DSqzs0b8QNhp9I9waFJsPJqTj:wAcTqGxwZtkNR4U8Ehp9OXsgTj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ