DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
MediaPassX.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MediaPassX.dll
Resource
win10v2004-20220812-en
Target
94bda14da5313f3fadeccbb1ac83c2426d5eb52291f15c96e5e6f690249c0d27
Size
26KB
MD5
81332dc7da49ac2b36d40010eacce0ed
SHA1
8158b82110ef4054ac4b3f53ba10aa36f74b1cd3
SHA256
94bda14da5313f3fadeccbb1ac83c2426d5eb52291f15c96e5e6f690249c0d27
SHA512
ad0a25438e12813f326a5157eb7295793818ce4ea5df4f6cb1b524cb6be5ed49409c0925e5a90273cffe62a297e003ebf427723d759fbc003f10e1d9f154cca1
SSDEEP
768:GR5/LAqAwEecBY9Io6ujhT8bAU+QL3n+zk:8zrAwEE9/6uVSA9QB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/MediaPassX.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/MediaPassX.dll | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ