DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
adf64d9f31b809c15953190268ecd48ea07afc67a4dc7e35bc588e8618a72bfc.dll
Resource
win7-20220901-en
Target
adf64d9f31b809c15953190268ecd48ea07afc67a4dc7e35bc588e8618a72bfc
Size
31KB
MD5
45fca088325475eb5b86751b1e1f4ef9
SHA1
db797c8a52b289b1cbc3eeae24ec22a732b51554
SHA256
adf64d9f31b809c15953190268ecd48ea07afc67a4dc7e35bc588e8618a72bfc
SHA512
707df8bfb5cd3ff9e9b8b977ea8ed428b27d30ff4b59f529496c42b6ce133449e9bc67c6581401b00642908e1716fd2a90b4a5cdcb11b17b9e1c3f90e88c4954
SSDEEP
768:Ot2M/QJcQUyE8UEMRiCDOugfcyDKlcEm/KDri:02/J/XdfVGNOKvi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ