DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
972e51626d9893626f21267effda255c64a533649a09cc8ba36fe7b0cf0b02db.dll
Resource
win7-20220812-en
Target
972e51626d9893626f21267effda255c64a533649a09cc8ba36fe7b0cf0b02db
Size
113KB
MD5
653abbab4a9d3dac11cfc49428a911e0
SHA1
5da8ca68c48a1774648cd4ad6b3fe8fab2533cd6
SHA256
972e51626d9893626f21267effda255c64a533649a09cc8ba36fe7b0cf0b02db
SHA512
430b80f0f7f6a1cb34d2e38d6ce8bd73d375de50dcd77094c29ce2493d557881abde4c9b2147dda5fe3b27caecb5c9d6222127b8c259d515810c824db9a4f71c
SSDEEP
3072:bQY4QNscdP0bZ7KfK7oQ83fMSaUv0w0o86s9+Ek8FhyOYCE:bh8d2fK7b8P/bv09t6scAryFr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ