DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a842daed31623ff5a7652b578135b12c94fd6b63df918e02bf4846e3fac3d31f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a842daed31623ff5a7652b578135b12c94fd6b63df918e02bf4846e3fac3d31f.dll
Resource
win10v2004-20220812-en
Target
a842daed31623ff5a7652b578135b12c94fd6b63df918e02bf4846e3fac3d31f
Size
301KB
MD5
305a5f241776b12344d0f0b17aba3a96
SHA1
d797e33d3820d74b6fab858aae3dca592aeb2c78
SHA256
a842daed31623ff5a7652b578135b12c94fd6b63df918e02bf4846e3fac3d31f
SHA512
af5289c1aa8c6cc2e3f7a620b2b28ecf134aeba3047c4398d81f66b2616fe0446c03bc82adae3b6fa1a385a674aeeeb3fe9e54d784842347eaba008e17672260
SSDEEP
6144:1CE7JpPh4QcF6zxMx2878ir17OB0PT2txH9s0r4e1CmUFtY:1nlpPhJ6kQ2t+1C0Uxdpd1Zz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE