CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9eae2db42a112dc2f16df3cfdf608d2cc8869048a19a299ba28354a4db4bf860.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9eae2db42a112dc2f16df3cfdf608d2cc8869048a19a299ba28354a4db4bf860.dll
Resource
win10v2004-20221111-en
Target
9eae2db42a112dc2f16df3cfdf608d2cc8869048a19a299ba28354a4db4bf860
Size
42KB
MD5
0ef5a93b3fd7c00e5450c9d3231cafff
SHA1
39e56661f1ef58d157c3411a7bb33ff152e499cc
SHA256
9eae2db42a112dc2f16df3cfdf608d2cc8869048a19a299ba28354a4db4bf860
SHA512
dc9491ab4a485ddc13edbd2d5d3d6034a64784c9a0152b65bf46c3b6557a6c630f048559db7ab2f648d7ba03943c2b5963a79aaa6a74b1748bf9c02a10574577
SSDEEP
768:F2nKORX5J1O8OKw+2bTPccKMPXsnbp7Xcp/pF9oCfXnzg5V9:knK0jhOKw+aP1XIFcpLCWXn+9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ