DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
03a28d343c34bc155cb13729f785216a9cbfea01169a05a6903b1226fd7f2d4f.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
03a28d343c34bc155cb13729f785216a9cbfea01169a05a6903b1226fd7f2d4f.dll
Resource
win10v2004-20220812-en
Target
03a28d343c34bc155cb13729f785216a9cbfea01169a05a6903b1226fd7f2d4f
Size
15KB
MD5
d0490a1fb7fd4294f52c1752bb46c102
SHA1
6a6f99e021a156c8c6ea439c07eb7b2b3a0fab94
SHA256
03a28d343c34bc155cb13729f785216a9cbfea01169a05a6903b1226fd7f2d4f
SHA512
38877774f5c9b78ca3011d8bae27ecd92a860ee1c238b58bc652e3c71a28465a6dae38162dd30407427a75325a578b63a239134d9d1ec36e1fa76d736125e8a6
SSDEEP
384:2q65+l7ajnP2lkNVvXnIH4RuhcWjzB9Tt:45+l7ajP2lkNt3mLzP
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ