DllCanUnloadNow
DllGetClassObject
Omknclk
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
b30ffaffd3e3007e32c07b485e5a43249aeded4ba9339722005484f328a6faee.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b30ffaffd3e3007e32c07b485e5a43249aeded4ba9339722005484f328a6faee.dll
Resource
win10v2004-20220812-en
Target
b30ffaffd3e3007e32c07b485e5a43249aeded4ba9339722005484f328a6faee
Size
70KB
MD5
139432b9911f77a0cbd324750fe16caa
SHA1
200dd1b832b884fee1841e48166405e2f14909c5
SHA256
b30ffaffd3e3007e32c07b485e5a43249aeded4ba9339722005484f328a6faee
SHA512
3fb16d127079aee5e5461962995b374b865d0d37116775d3aed2da362cedb0d28258ece93e8c8fd367597844ef67e5c992f6b79c14ed432c6e9a92a76900ab91
SSDEEP
1536:JXLwtq0c49MKioFjSz1UFLE/dW5MMbKl89h9LMTlp/8zWqlLqw7t1FVSr77GnouU:JXLwt/FiaU1Uq/dWFbNr8azD7VS372oL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Omknclk
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE