CancelDll
LoadDll
Behavioral task
behavioral1
Sample
92e998954d35aa352cf48ff26d344180051a458b7361af9498765d7de92e2140.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
92e998954d35aa352cf48ff26d344180051a458b7361af9498765d7de92e2140.dll
Resource
win10v2004-20220812-en
Target
92e998954d35aa352cf48ff26d344180051a458b7361af9498765d7de92e2140
Size
68KB
MD5
071785bdf61f365ee1c0114a8a66f815
SHA1
420158ac6d118d13a2aa5fefd635d6f5dd2a5769
SHA256
92e998954d35aa352cf48ff26d344180051a458b7361af9498765d7de92e2140
SHA512
a8d0b2fe6e4408331b29286f28f7a407690396cf84c3ab372157065c9fc7af180d521d58e70fc3101e2e5088362521896a01d306c3d8ea87da6f5da4d6925ad2
SSDEEP
1536:knK0jhOKw+D8aPomcAixY/IsFsXS9TnG7TtgxqCEkkN8kV+B+8dLe:knNhOKw+DlwmcBxfaqSJnG7ZgJEkk1Os
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ