CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ce42b58f0f294cc861adeecf115450f92c185c8189ec38e94fa67bd3850c4c6a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce42b58f0f294cc861adeecf115450f92c185c8189ec38e94fa67bd3850c4c6a.dll
Resource
win10v2004-20221111-en
Target
ce42b58f0f294cc861adeecf115450f92c185c8189ec38e94fa67bd3850c4c6a
Size
48KB
MD5
5458c02417615602169fff26a2ea3e30
SHA1
949bbc6fe86d72f250f5cf3b0ee01ee9622c0aa9
SHA256
ce42b58f0f294cc861adeecf115450f92c185c8189ec38e94fa67bd3850c4c6a
SHA512
4eb83060b693b6d4be753dbcceadbe76e9d49b636448eb1b1ffbe67833116cf288044055fd44dd97789c8d36c92f87aff9adb3dfa15339e7afc84f77c37ff630
SSDEEP
1536:CjAO15+wgcORxRC9l6SXjPGwxsrBv+iDw:CjAO+wgt1Ql6UG0wv+r
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ