DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ecbae8a4157bdc7ef53a83b8849bda5e777dd7a422e8f01ffe8d0e5e9e29b634.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ecbae8a4157bdc7ef53a83b8849bda5e777dd7a422e8f01ffe8d0e5e9e29b634.dll
Resource
win10v2004-20221111-en
Target
ecbae8a4157bdc7ef53a83b8849bda5e777dd7a422e8f01ffe8d0e5e9e29b634
Size
55KB
MD5
90915021bdcba43789cfbcbd67009111
SHA1
dec5a7458150d6f73870d1f55dea27c5508bfae0
SHA256
ecbae8a4157bdc7ef53a83b8849bda5e777dd7a422e8f01ffe8d0e5e9e29b634
SHA512
c7be3174dbe3dd8d0fae0bebf1ea14f4009fa99a0715ed01696b499f340cf615bdf19b037077f3df26d65a5a447064596193dac1db8353d15e81239bf4e3b918
SSDEEP
768:rHjNMCIxh/MSBTrb7S8c/WDqwq2QiPnBeSZOq+3NLYUtTbFvUQI+mEzQgW8ZmNww:rHmXB68HDptQRSsznbOQIvEsgWPn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ