CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
Behavioral task
behavioral1
Sample
d60463a2e15c3bf15086463ec6e28617f7f0f66457bc4effe26e8f2b95832887.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d60463a2e15c3bf15086463ec6e28617f7f0f66457bc4effe26e8f2b95832887.dll
Resource
win10v2004-20220812-en
Target
d60463a2e15c3bf15086463ec6e28617f7f0f66457bc4effe26e8f2b95832887
Size
270KB
MD5
68ccfe674f6ed98ce9e3ef1a8080ac70
SHA1
4bbfebc591e4df5aa6a64d0f2f9d71ebbdc651c9
SHA256
d60463a2e15c3bf15086463ec6e28617f7f0f66457bc4effe26e8f2b95832887
SHA512
ff85bb63948992b8183c5b67f43c47520ea67532d026e983f6f914fc496494915e50493b98eb6ad97a1b5ae9ed3e78a14a23ca58f7a16d9b274504bd9a9c295d
SSDEEP
6144:4+k63PsLTBfcOcHzDNaWLmXRhN3Jiz+ZR4mHqq6RZEgy6H7gu:fkyP8TBfvcHz8WLc/8MRjKnl7r
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
Setup
SysLogoff
SysLogon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE