DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
9f75292e53abb2cc8a996a56bbf99f99245e8f7d2e5cb4bcaf7734bfcaf6d9ac.dll
Resource
win7-20220812-en
Target
9f75292e53abb2cc8a996a56bbf99f99245e8f7d2e5cb4bcaf7734bfcaf6d9ac
Size
116KB
MD5
4ec76415fb64b1ff2fc93062521bc00e
SHA1
7a1fa9ed430568ac6dcbcf48b8be001a52568bd2
SHA256
9f75292e53abb2cc8a996a56bbf99f99245e8f7d2e5cb4bcaf7734bfcaf6d9ac
SHA512
ba1e01eb05e3858503531db82aa80dec88e8a79d243b26ef4e02452ab44f964db6877c9b8045538d43956b950d8b7f2cfe9308f23986b6847fb80b3de3137c89
SSDEEP
3072:49c/0bl4CI0UODxMv5YV7mI97W6tJ3jdWwzXPygi6:4a0blhIN5kW673j3zj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ