DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f722a5130ac81790cdc3381521763a52b7c4f7bd971e9e00b280938c7206b424.dll
Resource
win7-20221111-en
Target
f722a5130ac81790cdc3381521763a52b7c4f7bd971e9e00b280938c7206b424
Size
126KB
MD5
29657b373e4eb12f94eb7b645abc18d5
SHA1
1407b3cd34c0a39dc9ac9a5385f2aec1c4597868
SHA256
f722a5130ac81790cdc3381521763a52b7c4f7bd971e9e00b280938c7206b424
SHA512
d61b6587bff1d42ec76ce23bb9b5f1c2474ae9823673695d7dcf67101d19d310eec0692b3a8687cf00992b232342d35ae7146afc585995fe45e14d311fda87ad
SSDEEP
3072:c84cXbwphdJ9a51vacNTZ45KUsHRk/zDTF7TzP:RLwHdJ9q1vBylPT5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ