DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fa2489788f7bcc7c00bf3a5f50bff44578226529e5e8e0905290ebce6cd2a5ad.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fa2489788f7bcc7c00bf3a5f50bff44578226529e5e8e0905290ebce6cd2a5ad.dll
Resource
win10v2004-20220812-en
Target
fa2489788f7bcc7c00bf3a5f50bff44578226529e5e8e0905290ebce6cd2a5ad
Size
151KB
MD5
3bb692adc4884bacae0a20124fd9d1c3
SHA1
823895b6e80034147e55f2cc2c9c730546b2b956
SHA256
fa2489788f7bcc7c00bf3a5f50bff44578226529e5e8e0905290ebce6cd2a5ad
SHA512
cf79c5eea43d55b3379a16040c9a69db0b9023a39d6e5c9e499d0e99c29b0f4993846100f2bc14038522fde4e09c0ea54d505f7cd91590795068f87fd4b77e9c
SSDEEP
3072:/3mGMlG7kMsAoEyvWt04jkwGWOXsErVwt1WM2TV7vz7KWXcCcFJ9abUsTtvuSS:/31WG7kMMEHtB/GNdhwt1LuhvzgCchqo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE