DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
79f9de85bc9c67225f1a256163b4fa1d9e869dd43e2c1e5634105161eab78033.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79f9de85bc9c67225f1a256163b4fa1d9e869dd43e2c1e5634105161eab78033.dll
Resource
win10v2004-20220812-en
Target
79f9de85bc9c67225f1a256163b4fa1d9e869dd43e2c1e5634105161eab78033
Size
36KB
MD5
230eb34c95cda25ebb5ba36dcde924a3
SHA1
1294c1e7c649c30dea205417bb7af55fd4ef908c
SHA256
79f9de85bc9c67225f1a256163b4fa1d9e869dd43e2c1e5634105161eab78033
SHA512
4d16ccdecab3a7fe9892a4eb8bace0bbbff2ff73f02d42fa970a6aac448011a009f16a6ea8968babab690afee38512de769ed5f53003761ce845e96c5bb6bac2
SSDEEP
768:oLiV+FYoLeuR2Cvk4XDdtS40CKbazPlQZNBJwPc25u1DhuR4CG4:oeVkYoLeuwCx7SbablqNByPX5A1m7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ