DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
57dbc831f6645db30503ec910ed0b56709e79d0812add754e3b032da020f0eed.dll
Resource
win7-20220812-en
Target
57dbc831f6645db30503ec910ed0b56709e79d0812add754e3b032da020f0eed
Size
64KB
MD5
28cdd1bcb22031b1f3db2d451ba2b136
SHA1
c9075e25ab5ef9e1a10ebd78ea0fecfc0e65050f
SHA256
57dbc831f6645db30503ec910ed0b56709e79d0812add754e3b032da020f0eed
SHA512
be00997418ef9ae52249f6efa187f38d8e9a9f20ec5c0034beb3132dffbfeefb57ed24bea9fbd6b66ed3f1818473bff02763ac22219e54daba0d9468a9b4aec0
SSDEEP
1536:h7u/sUi7TE2yfR2kGaGYdpGbWaZy1k0+3rgISI98GgM8N:h7kjikNZ2kNSbmmV7gzqDC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ