DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
Behavioral task
behavioral1
Sample
803cb597ce5f2530d0ede01e67e812dbdc871ebe4129051012bf8b135f3e2906.dll
Resource
win7-20221111-en
Target
803cb597ce5f2530d0ede01e67e812dbdc871ebe4129051012bf8b135f3e2906
Size
779KB
MD5
c42cbb73e235951e56562abbf79e4221
SHA1
87376cc1b5008910d0e90c541053626075f124f5
SHA256
803cb597ce5f2530d0ede01e67e812dbdc871ebe4129051012bf8b135f3e2906
SHA512
01db913e0ccb3dfa79f7efa3732b62ba28eeb3470ffa58cda62be580386e75acf1a54a9f567ab748a73228750a41d9e5db918ce20382d9f6a017f1812eee9d48
SSDEEP
24576:WO3s4A3logYoP5WI1ITYrveJkZC/BJX1ziZLryHgraWjPrpB6:WO84AoAPMI1GJkZC/BJX1ziZXIguWjz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Gbieh
SpecialFunction
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE