DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
b331b9982f47d4fd7569139ea6277268934808d22994c5330f21551e5ce679f4.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b331b9982f47d4fd7569139ea6277268934808d22994c5330f21551e5ce679f4.dll
Resource
win10v2004-20221111-en
Target
b331b9982f47d4fd7569139ea6277268934808d22994c5330f21551e5ce679f4
Size
44KB
MD5
8d8e8eecdc6a1ec4b22a63d69d45fd91
SHA1
a6f3698d654385d52791a034aa5c5e79940b5c23
SHA256
b331b9982f47d4fd7569139ea6277268934808d22994c5330f21551e5ce679f4
SHA512
e1b936c0369481d1b2b508ba212aaf087118ba03d0759aa0ab06b6e1c9619de206f6aa4ad10fdafc52a38b5533923ea546a075a92fd4d944f6f805bae9f8b00a
SSDEEP
768:iF0ClaQWePZ9pzkC/Gclo18EJ3MuwgRDiTzkvqLUPB:iF9YQ/PvpACPHOMuwMDjPPB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ