DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f8e9dd47adad9933b718f90943b8fe90bcb7e16c30da0fda70bf4c26e19329b6.dll
Resource
win7-20220812-en
Target
f8e9dd47adad9933b718f90943b8fe90bcb7e16c30da0fda70bf4c26e19329b6
Size
151KB
MD5
20245e13798510ee2c6dbb30d31bc590
SHA1
9865566e4e384d4286178d56f7e42253e619de76
SHA256
f8e9dd47adad9933b718f90943b8fe90bcb7e16c30da0fda70bf4c26e19329b6
SHA512
8d29574dd42456686bbd7dab0a4d2b9149fea34fe65ec1e1bbb59779eb0b1457295fe019f1ef41820fa0eb895314cdb5ace9ede9d3de849d85c66f40e54e73d8
SSDEEP
3072:osTvN4P13s1DBsphZEhJtFRtMFG+0CX5mypsbLzsmBB1hnul8oYtB3ODqg:Lva5s1SpnEvEFG+0CpNCfzsmBBTn+wt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ