DllCanUnloadNow
DllGetClassObject
Kmkncpm
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
faf32f986c44d17f33f0cb6a987eea2e2184e846c22f56922978fae9c76f5c4b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
faf32f986c44d17f33f0cb6a987eea2e2184e846c22f56922978fae9c76f5c4b.dll
Resource
win10v2004-20221111-en
Target
faf32f986c44d17f33f0cb6a987eea2e2184e846c22f56922978fae9c76f5c4b
Size
70KB
MD5
9a8c826288f9d275717452e6988793b3
SHA1
26da1800654a7dab93d96bfd52b60238bc57d3d0
SHA256
faf32f986c44d17f33f0cb6a987eea2e2184e846c22f56922978fae9c76f5c4b
SHA512
a3b7c6f33d76c3f89904346ccc7ed2f2d92fa87f9e3b58c3ae3179ec8731ac0df5465ec42db351e4b1d79f8d3f73acc8bb5160d66b22cc2f529260b598641349
SSDEEP
1536:ZXLwtq0c49MKioFjSz1UFLE/dW5MMbKl89h9LMTlp/8zWqlLqw7t1FVSr77Gnouv:ZXLwt/FiaU1Uq/dWFbNr8azD7VS372o8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Kmkncpm
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE