DllCanUnloadNow
DllUnregisterServer
Behavioral task
behavioral1
Sample
ce1ae18cb3842a0a619c7ec0276cda032cdba37af78e2f945b164d2265b936a6.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce1ae18cb3842a0a619c7ec0276cda032cdba37af78e2f945b164d2265b936a6.dll
Resource
win10v2004-20221111-en
Target
ce1ae18cb3842a0a619c7ec0276cda032cdba37af78e2f945b164d2265b936a6
Size
20KB
MD5
b4d149b7957f6d5980ac5151034ea67c
SHA1
439468411d737593de3c887a41b633cd50f99ffd
SHA256
ce1ae18cb3842a0a619c7ec0276cda032cdba37af78e2f945b164d2265b936a6
SHA512
8314210d64a6923cad4a23bfdb7859498915274ebb1c3e190d5450a3d28e76fc2f4ff0c3cf7d8b7885e675e848681d2aa6909e77135357e79e2f34979bdc2e0c
SSDEEP
384:qHrKSW7Ty7fjygqExBubThS6z4QrakBx8YxajfTJxj9/iT+:qOdPyzjygs3IPQrak6r/xh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ