CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e8fb2f04a86cf9e4269aee936bba2d393ce0c6263e55399abfc9132013f7f6f2.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e8fb2f04a86cf9e4269aee936bba2d393ce0c6263e55399abfc9132013f7f6f2.dll
Resource
win10v2004-20220901-en
Target
e8fb2f04a86cf9e4269aee936bba2d393ce0c6263e55399abfc9132013f7f6f2
Size
58KB
MD5
cb524359a57b4e2cbd71808b9602e64d
SHA1
7226d01154cd7a964652cf6a0ff7afe34b153e11
SHA256
e8fb2f04a86cf9e4269aee936bba2d393ce0c6263e55399abfc9132013f7f6f2
SHA512
22771f26b7c9e66f1e6199cd0a7e6a202b4b2c3b9a996edec5b08a85dc392e9d1cec90e6b59bf6c977fdc6baa26135b47b2eb985ba72955028c6267291b28f6a
SSDEEP
1536:75ZXMityec7t8KCK3iI2stHLjHb50HW35HRZL3UwHg:9ZLncZ3CKSBstHv750HWNRZL3UwHg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ