DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
MediaGatewayX.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MediaGatewayX.dll
Resource
win10v2004-20220812-en
Target
a77989a9a5505c55cf221b047e69b5a46ebbfd9379afbf32fdf6210162e1906b
Size
36KB
MD5
6aaf8e5d142ae1385170da40755d4f9f
SHA1
ea05656e2d8343e2b208504a4a35773fa08361c8
SHA256
a77989a9a5505c55cf221b047e69b5a46ebbfd9379afbf32fdf6210162e1906b
SHA512
197514e7299d0a60d03bd17db31924b51a53ecc9858896ef8e31abcbfeff0e9f6357c9a4ec215b220249081e03e6d2142a8d6e8e80f594adc5f47f49b68cfb7a
SSDEEP
768:M4cxs5VcvKBniOxd3HQmUPzgXrr7DTSn+V6lNH06TZoWeEAtLixqYBrC:MrwVcv6pxd3jUPGHw+g0r1OHI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/MediaGatewayX.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/MediaGatewayX.dll | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ