DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
51ae2ea82ea34a7219a7618b68ef25d3076120e0aad7ad0d3280d914bcad3baa.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
51ae2ea82ea34a7219a7618b68ef25d3076120e0aad7ad0d3280d914bcad3baa.dll
Resource
win10v2004-20220812-en
Target
51ae2ea82ea34a7219a7618b68ef25d3076120e0aad7ad0d3280d914bcad3baa
Size
23KB
MD5
82125afe2eaecc9dfe353fe4123109d2
SHA1
6936e5aebc5433ee7b8d8f33ea5ebf403e72446b
SHA256
51ae2ea82ea34a7219a7618b68ef25d3076120e0aad7ad0d3280d914bcad3baa
SHA512
fa4510371aa629754149e23f901858ebc4956f56d68b6671324299e0dadb302d5cf2196656ba0f405688d64e3ca6b4edf444bdea4797d120f794f15f9798eef3
SSDEEP
384:QWsHMl+nsJiUNOEE7gC9dxhPqJb5yQnbNH+rGr8:JsH0d8EEcsNQZer/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ