DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
5ae65bc6b58405ba55b46543eec821b8b63e4716c730ae93af8addd7bf6c8fd4.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5ae65bc6b58405ba55b46543eec821b8b63e4716c730ae93af8addd7bf6c8fd4.dll
Resource
win10v2004-20220901-en
Target
5ae65bc6b58405ba55b46543eec821b8b63e4716c730ae93af8addd7bf6c8fd4
Size
30KB
MD5
3b8e4bcd8d8a1fd00327646454930cd7
SHA1
3a06336ab398f5affa687174cd700bdb1f8eb3b6
SHA256
5ae65bc6b58405ba55b46543eec821b8b63e4716c730ae93af8addd7bf6c8fd4
SHA512
5e06b61a3e45ec7de60ec302606851adae61cfe9a8b9d5e1051fb5fbf9a845a93a1cb4b6f6052e3dece6e52f3e7c3c7a3a24b68954a30418dc685688c6f35641
SSDEEP
768:gOUANfS5GXtmD0NvNP9ZJLwrH11eJrtLJFADrt2I9wZ:gOkWm45h9ZJLCbethQDrthwZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ