DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bbae3ada707d353996baf3289d5c8b849670499bc7b8f78ce5b592b4f6b4b004.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbae3ada707d353996baf3289d5c8b849670499bc7b8f78ce5b592b4f6b4b004.dll
Resource
win10v2004-20221111-en
Target
bbae3ada707d353996baf3289d5c8b849670499bc7b8f78ce5b592b4f6b4b004
Size
237KB
MD5
b0a6d65db864c1f338ce50c9746db4ee
SHA1
6e5e50053c234ecf7ad80871995352d339f56486
SHA256
bbae3ada707d353996baf3289d5c8b849670499bc7b8f78ce5b592b4f6b4b004
SHA512
8c01d69f660a766e954e637a9a1e87fa08fb915c34beb3dd350e3e655da6c57794ec81bcd6597ceb1f1b5b53bde1648bce57bb74a2f2266b027e3428f228da82
SSDEEP
6144:sBVSbT1mgs/E34q6K5Vg1M0f8BTsQIIm:c8bR4/hq6gVg1MeYw2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ