DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
MediaGatewayX.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
MediaGatewayX.dll
Resource
win10v2004-20221111-en
Target
b3da4299a294650319daa970133aa40351cad20aa0a8ab0add8417158b802a7e
Size
36KB
MD5
8ff4dc926cb69a5fda8c0f2edb1c8b76
SHA1
23178a652b8064dc89bf5c838de5b1b02d96da01
SHA256
b3da4299a294650319daa970133aa40351cad20aa0a8ab0add8417158b802a7e
SHA512
d5e01dd754b44876b1a141b6c4eeb9135d1e9cd044f668f3ddabcae8cb59e3c454f8d43e13a2d2ccffa315ba23328fbc5b253aff4dacd3af47b4aa7fc7850670
SSDEEP
768:84cxs5VcvKBniOxd3HQmUPzgXrr7DTSn+V6lNH06TZoWeEAsL3zMYMkd:8rwVcv6pxd3jUPGHw+g0rUHn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/MediaGatewayX.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/MediaGatewayX.dll | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ