DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
a951d8079760339aa496d73ce3ad6b4c7e8df2e9a7636f710d9b84ec692ec45a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a951d8079760339aa496d73ce3ad6b4c7e8df2e9a7636f710d9b84ec692ec45a.dll
Resource
win10v2004-20220901-en
Target
a951d8079760339aa496d73ce3ad6b4c7e8df2e9a7636f710d9b84ec692ec45a
Size
302KB
MD5
5e04081d35175dc965278f7faeeba89f
SHA1
5f1e733b062cb65ba7f7ddd8d679a7b937931b4f
SHA256
a951d8079760339aa496d73ce3ad6b4c7e8df2e9a7636f710d9b84ec692ec45a
SHA512
839610d1b47ba1ed4414129842776292c862a9c07eebc502546f367d6a72366ce35417fd8142480946af7adf16855ad7c89e02e86bdbd2fb6ed3652b5f3213eb
SSDEEP
6144:Lhzho3uHTdtA0slNuGgzncbJp4tYGM9ueny7Vo/215TiD55fondbPvWS8FAXDFng:LhzKCT0Znulzsp4tYGM9LnCV+2/GjQd6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ