DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ea22f27b881072b1ec8924ba1c93cf220fc8b08cd319e8821c1a72fb5d24fc1b.dll
Resource
win7-20220812-en
Target
ea22f27b881072b1ec8924ba1c93cf220fc8b08cd319e8821c1a72fb5d24fc1b
Size
67KB
MD5
7951bcf99c0d8eec63dd1b53b28ea590
SHA1
3dc81f904f5f72d13ae1912b915d195ac8327dbc
SHA256
ea22f27b881072b1ec8924ba1c93cf220fc8b08cd319e8821c1a72fb5d24fc1b
SHA512
843c7c422d550b80226404179e31c4e647e5b429a462e699974fd12c8b29ec5ebf85a34cdd34f5b4ab201198b765764970f075d7cd497ede43cdf23e2d56ef3e
SSDEEP
768:TXSBJWaD9YU28PzDoew9BGgLAgSuNgPtgqMMVqH0yZvsSdU9GmBnjlOY+Ul8x:TX0JWaBY8YeMdsgQFgCgDs4UldQil8x
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ