DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bf2f86dd938f40a096c5c9a31dc2bf9225e7e33ce1a137db368f24005cca208c.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bf2f86dd938f40a096c5c9a31dc2bf9225e7e33ce1a137db368f24005cca208c.dll
Resource
win10v2004-20220901-en
Target
bf2f86dd938f40a096c5c9a31dc2bf9225e7e33ce1a137db368f24005cca208c
Size
584KB
MD5
846ecd13cea24cdb12b63866bc208688
SHA1
df537b25dfd203e011acea614c127f36bd67c19b
SHA256
bf2f86dd938f40a096c5c9a31dc2bf9225e7e33ce1a137db368f24005cca208c
SHA512
e88480bfed62a585d9d5baa06e9faee23b37c189e02f6ff201bef1aec02771d6a932ddced5fa9171f53a9896423f6b27b889c1625b7729d8f7cac9610f7b85cf
SSDEEP
12288:iJH3bQuUXUsoAffojgjAqNpzML4mzToFb8dgWhoS5+:SH3MKsoAouAqIL/0FIdV+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE