DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TestFunc
Behavioral task
behavioral1
Sample
b9fe0e1f55f45e2bc7f14e999d992f2b956dc334352e68c4279e3fb55b9cceb6.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b9fe0e1f55f45e2bc7f14e999d992f2b956dc334352e68c4279e3fb55b9cceb6.dll
Resource
win10v2004-20220812-en
Target
b9fe0e1f55f45e2bc7f14e999d992f2b956dc334352e68c4279e3fb55b9cceb6
Size
17KB
MD5
6b13f147fac7dfa30e7a618fb25f3a40
SHA1
27fcb6b6b992fd6444a61b4a971d35be03a13727
SHA256
b9fe0e1f55f45e2bc7f14e999d992f2b956dc334352e68c4279e3fb55b9cceb6
SHA512
2bb77276b5b2788a893fadbaa2e53087ef6ab69704b8385ab1321c7634384670b4207c76f061e3b54cbffe7b1884e6b3c81075e6d6d8da372b18540412464284
SSDEEP
384:NEDVanAjh93zEb9Xt47Y/P0cGpyp8QqHxXeusOz:NEDVT93zEpXm03OpyprGLHz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TestFunc
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ