DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
9b31055195801f8da8d1b97dbf2d14cbe130fac3bd413564b7cb74ccf1532958.dll
Resource
win7-20220812-en
Target
9b31055195801f8da8d1b97dbf2d14cbe130fac3bd413564b7cb74ccf1532958
Size
116KB
MD5
03c88347f2c59c572a6c9dbffe14605d
SHA1
953974df5bb95c72202e2f11bb69aa7420f090b0
SHA256
9b31055195801f8da8d1b97dbf2d14cbe130fac3bd413564b7cb74ccf1532958
SHA512
e5d91e2a478154cb32121e9c8b956f68fe0963b380c9599c93a93dfa753734097f9a821cf89a785a533b7673b119e7c02bfcc9ce0e0c23aa854b1fbd9e0e194f
SSDEEP
3072:RfKEVUtM9aHXQhUFVJe8ZiveDWPHwKPrCl2la39KbliTyH:RiYUtM9aHg+JNNqPwKPrCl2K4iWH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ