DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
_CallBack@12
_Init@16
Behavioral task
behavioral1
Sample
bd6dd963c1667e93b996688073862b25ee3e0a253f05d0869fa165b5a2d7c3c3.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bd6dd963c1667e93b996688073862b25ee3e0a253f05d0869fa165b5a2d7c3c3.dll
Resource
win10v2004-20221111-en
Target
bd6dd963c1667e93b996688073862b25ee3e0a253f05d0869fa165b5a2d7c3c3
Size
88KB
MD5
1312f3f4067f7620bdb4622ce60334a0
SHA1
e3814f27d793b2f9ac6b0e3018950088e5e9f84f
SHA256
bd6dd963c1667e93b996688073862b25ee3e0a253f05d0869fa165b5a2d7c3c3
SHA512
9fe46d1b0426b07517831d5639a18a6aa5407b9b6cf9fab5bb1ca45127688cbf78b54f0250141b6db481aee9428f2617537d3ced64c870884c75a94c72ee2cde
SSDEEP
1536:yX7ke1teYxFjAn2CKZR+6sgXbKflU/aDfmYgZYYKWeo/iGPYTWpSVXxNM/f5GYfv:yXYe1oYjjATcwkIlaanKbKWeo/cTWo3q
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
_CallBack@12
_Init@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ