DllRegisterServer
bkl
Behavioral task
behavioral1
Sample
a3efc34002c1cd77e3a5e38d36c75d8831f49c80ede9d0aa22ade796f478b346.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a3efc34002c1cd77e3a5e38d36c75d8831f49c80ede9d0aa22ade796f478b346.dll
Resource
win10v2004-20220901-en
Target
a3efc34002c1cd77e3a5e38d36c75d8831f49c80ede9d0aa22ade796f478b346
Size
55KB
MD5
889c77add096a3a231953e48b4ca5def
SHA1
b05047afe93d1e448fa30080e83ae41a7e303a5f
SHA256
a3efc34002c1cd77e3a5e38d36c75d8831f49c80ede9d0aa22ade796f478b346
SHA512
7fb3d458223ec16166e1ac1aa4a853f0bd585f09aed1156c225870524a7e88bf69fd003eec78f28e20e5a33b3dcde0975538cf7d58f79cbf477acac44fd2c623
SSDEEP
768:uXO6IFE0wGQiExUinEknOQRRElVbdKrhFywIP890mQAOem9yaBGXJnetgt3AY4mq:u7jDnOAqdMdFywx97BOeCVmlamq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
bkl
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ