DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
88aa34f9a947e5c2709460894578be0a832bf62099f3c680a8ac42c9f73d260d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
88aa34f9a947e5c2709460894578be0a832bf62099f3c680a8ac42c9f73d260d.dll
Resource
win10v2004-20220812-en
Target
88aa34f9a947e5c2709460894578be0a832bf62099f3c680a8ac42c9f73d260d
Size
38KB
MD5
832b7b36d115d2bf1872fce54d459d90
SHA1
1086a4992eddcb77d8b5b1feb4e1a776b691bdf6
SHA256
88aa34f9a947e5c2709460894578be0a832bf62099f3c680a8ac42c9f73d260d
SHA512
61e916989672e14012ceb3839c4e901db073b75439e7277599068282b5c3a056cddf55006b05da86587ddd05a35a9b01251e3e9d1730608cb542df21e48f5568
SSDEEP
768:ZyGkIuiGeO97+zLzgNsgo7DrrLxK0NzfvsQXmVc6kx2p+kibkoCW:ZyGHusO9qjgNstvrrLxFNzX6w+VDXW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ