DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
af276ea333e83d1082a05f0906c84e420f3e1a0612b5b1ebefd7d1269febfcb3.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af276ea333e83d1082a05f0906c84e420f3e1a0612b5b1ebefd7d1269febfcb3.dll
Resource
win10v2004-20220901-en
Target
af276ea333e83d1082a05f0906c84e420f3e1a0612b5b1ebefd7d1269febfcb3
Size
68KB
MD5
e11d9d8c79c001f71b2d5ca64a163f5e
SHA1
753ea02f14d1e956edad5939c5f5009ffb413f0d
SHA256
af276ea333e83d1082a05f0906c84e420f3e1a0612b5b1ebefd7d1269febfcb3
SHA512
d4ecee9c7ba547a73b11145d636511da6eef0b756aaf2962112677add5e4e4ad5b458a989824a6c6f6e96520e4d068ff65bbb1f715763e60de7c8a1272e5e6ea
SSDEEP
1536:x0DEX2sy2JVLHJaNUSl69Qjlhqln21ohxZzd67Q8nouy8dx:t2sy2JVLH0dFxonBHzduoutdx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE