DllCanUnloadNow
DllGetClassObject
Simenze
Whaier
Behavioral task
behavioral1
Sample
cd85ecf4bdf54993d87ea84f25ac3980d146b2aaf6c663e56651c799bcb89cbe.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd85ecf4bdf54993d87ea84f25ac3980d146b2aaf6c663e56651c799bcb89cbe.dll
Resource
win10v2004-20221111-en
Target
cd85ecf4bdf54993d87ea84f25ac3980d146b2aaf6c663e56651c799bcb89cbe
Size
231KB
MD5
3c9aba7a024a950e951fcf1b5c787d38
SHA1
d1ba1276898cb871533e02eab8279d77701865a1
SHA256
cd85ecf4bdf54993d87ea84f25ac3980d146b2aaf6c663e56651c799bcb89cbe
SHA512
00aceb3f379e7501a1a2d90c89f63137c73cbde88ed40228dbeee0122184454e00f0a7ddd4428614ba5c657d3d6c6aa3ebe2153c02773e7c18b2a5438ad2e156
SSDEEP
6144:Mk9oSr1+6FCmEmTxZsAjBJtohXNGXdcf:Mk9oShFCGTonGY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
Simenze
Whaier
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE