DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
61b603aa39eab02c56ae515517f84d2e78c22e073cfb67e93da8d8293b9292ce.dll
Resource
win7-20220901-en
Target
61b603aa39eab02c56ae515517f84d2e78c22e073cfb67e93da8d8293b9292ce
Size
26KB
MD5
3018b582e1c4e368415afcc31209a4a9
SHA1
39dbe855ce954c715c771d5d61d8d0cd93fb7cbc
SHA256
61b603aa39eab02c56ae515517f84d2e78c22e073cfb67e93da8d8293b9292ce
SHA512
834b29715775880222334d0c4dccfc8e3a92ad9e00ec4233bec8c8ae38a7a550c204f761addf50cbf216ee213b1841b100f5022de2c24ffb035bfce23c17ff60
SSDEEP
768:dv5OE73oqgcm8q9bF8gfsIWw0jpDmM/e3HkpYp:dAm3oqLmJxNfsIWw0NDmsX8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE