CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a72664dbb4561ab3b6bc6005a9fcc4edb1a18e11995d03a7d12a7c071af1da79.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a72664dbb4561ab3b6bc6005a9fcc4edb1a18e11995d03a7d12a7c071af1da79.dll
Resource
win10v2004-20220812-en
Target
a72664dbb4561ab3b6bc6005a9fcc4edb1a18e11995d03a7d12a7c071af1da79
Size
57KB
MD5
f7a61c030a20c6a5ec332cd913baf17a
SHA1
0092df27753d280faf4f83baaa9b401db2b18395
SHA256
a72664dbb4561ab3b6bc6005a9fcc4edb1a18e11995d03a7d12a7c071af1da79
SHA512
b0cc9e2eaa9d6de5a9f618f34aa8fa34ae89e228b64ef4fb4c4488064e0b55d5cca98f0c740e26f4bcc50b084608f8b4e3e59da80841866bc257d77371ab2208
SSDEEP
1536:6RTVGYXGOMSfdpep13fTQnf0JTP59jcxJM5RafLbB:6TGOtfd0p1rCf0JTPDjy+SD9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ