CancelDll
LoadDll
Behavioral task
behavioral1
Sample
96d5c6abd275de3ee7fea52b98870c417b1d82af6db83911a73d44cad6f6a4da.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
96d5c6abd275de3ee7fea52b98870c417b1d82af6db83911a73d44cad6f6a4da.dll
Resource
win10v2004-20221111-en
Target
96d5c6abd275de3ee7fea52b98870c417b1d82af6db83911a73d44cad6f6a4da
Size
61KB
MD5
9d4ab441c3e1a1ac0d4f2d7c478291a3
SHA1
2d03d444420970e0ac3639ba0607a626f755cb2e
SHA256
96d5c6abd275de3ee7fea52b98870c417b1d82af6db83911a73d44cad6f6a4da
SHA512
0dfbe5b284dc1a7c2515cb68f8fc100db6f0336da3bd2af493c69648854364cdc7075748f69f481a0cfbd7bc1d8dc5960da4c5fa38716789fc1627c270418be4
SSDEEP
1536:Qgm8kIUa71Oo6pfrb4PZP0ul59/bm3LVT/b+4:QN8kv61X6pfrMR0skLVTj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ