DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
cfee22825d845e9605f581f7ff02fc08d0b842dd829ba7b751a359f2fa9e3e7b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cfee22825d845e9605f581f7ff02fc08d0b842dd829ba7b751a359f2fa9e3e7b.dll
Resource
win10v2004-20220812-en
Target
cfee22825d845e9605f581f7ff02fc08d0b842dd829ba7b751a359f2fa9e3e7b
Size
31KB
MD5
6ae40cd35f1493fe6caec2114e89c083
SHA1
e11f8782fabc07896f76e522e3f490850dfe871b
SHA256
cfee22825d845e9605f581f7ff02fc08d0b842dd829ba7b751a359f2fa9e3e7b
SHA512
f6f3ef3c03162f3f5210b5ce9e95e869ecbc9aca622b07d068cca93c22a72c25d75d6685326fc7dda98292d28b22f28c8ff65cf473520c47fc7529508ea279ad
SSDEEP
384:nO+R5ElKWjnvsFpRbPs+o697a06MUv9mF3jD/9ee+QokZYr:nOG5ElKWLsFpRw+bZUv9mF331r+tP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ