DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7d2bc7c54a73c6d2956e7e02a2271753544e61d84f2d1bf98b171536cf7a0e65.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7d2bc7c54a73c6d2956e7e02a2271753544e61d84f2d1bf98b171536cf7a0e65.dll
Resource
win10v2004-20221111-en
Target
7d2bc7c54a73c6d2956e7e02a2271753544e61d84f2d1bf98b171536cf7a0e65
Size
24KB
MD5
49c07d1355eaed94c888ebe8d38221f9
SHA1
6291d0fb5ba826a6c403ce8c943fe5d7a0575786
SHA256
7d2bc7c54a73c6d2956e7e02a2271753544e61d84f2d1bf98b171536cf7a0e65
SHA512
c911f2cc1fd10b541962ed4404d1ebf640fce57ba47d835cc13afdedee1315bcd8b21b97d9951e5e0352d2b3f99cc06156e6b9682dce74db4d2f002644cb1073
SSDEEP
384:q7PxADQRga90PfhkzeZ4asWCQSSY9dqFPvBrLUDfrQMs:qzuaUhnq9WEbY5H+MM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE