DllRegisterServer
ServiceHandler
ServiceMain
Behavioral task
behavioral1
Sample
a7f21a60b306b65e59101baecf63b01b027c4c15dc84114c34a743e38071e8fa.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a7f21a60b306b65e59101baecf63b01b027c4c15dc84114c34a743e38071e8fa.dll
Resource
win10v2004-20220812-en
Target
a7f21a60b306b65e59101baecf63b01b027c4c15dc84114c34a743e38071e8fa
Size
11KB
MD5
671e1dbb26992c2aeea3ba942f2e0089
SHA1
fec7258af93421332c714d559f29f14debd64529
SHA256
a7f21a60b306b65e59101baecf63b01b027c4c15dc84114c34a743e38071e8fa
SHA512
f1367eb50c1fb599ea610a65838449f8c58e846297e009167ce752e05e520f7ef791c545d5317bece7ee9de6026f811f8e5b56900451976ea36d71e9ba110868
SSDEEP
192:pDohy+Uv1XLIBN2I/Gfz4UAeYyc38SlrejTCGE6vDfpHAfb3VIToC8lYbi:pDohy+UvtUTu7+eYycMSlrejTrE6b1AQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllRegisterServer
ServiceHandler
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ