DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
9d884800077bb00a5e7f3007ba744849abf5cd3d1c4db696417afbce11b36605.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d884800077bb00a5e7f3007ba744849abf5cd3d1c4db696417afbce11b36605.dll
Resource
win10v2004-20220812-en
Target
9d884800077bb00a5e7f3007ba744849abf5cd3d1c4db696417afbce11b36605
Size
24KB
MD5
18c96535549aa5f1a7db170ce26f5b0e
SHA1
c53c20e81de370c65c4062db1ef8a9cb4a49af46
SHA256
9d884800077bb00a5e7f3007ba744849abf5cd3d1c4db696417afbce11b36605
SHA512
923def71c84c6cb1cad684571adae92c7edac66931648276c2596960b40cb45f1b51a9cf2e0339b1397b990a4ebcb013d9c09f997226d57523ec1fe04116f5e8
SSDEEP
384:vZ0I1+Zia1K1KWfuk9J3pIccW4kRDpQVty8u7fmyu5TdKLxHklWf:vZ0IwZkE29JmNs1q4OyiALt9f
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ