DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ExecWait
Remover
Setup
Behavioral task
behavioral1
Sample
da6ea5ca8be3764c98df83c7589641d52413ce598a9ddf8a6d0dd82a2a114f57.dll
Resource
win7-20220812-en
Target
da6ea5ca8be3764c98df83c7589641d52413ce598a9ddf8a6d0dd82a2a114f57
Size
402KB
MD5
ccc719c0c9c1c39ec3327cb6525a5ee1
SHA1
a228e3e40e065b421c3b307552d3d5e846b46cb5
SHA256
da6ea5ca8be3764c98df83c7589641d52413ce598a9ddf8a6d0dd82a2a114f57
SHA512
bfd006b2e26f6b906875161e9d954443a2b1dadaaafe1cead1e7702bbf7869e9f5e60231e0f79521cdcce76e211f4611c63c3f4b8f418f41cce8564aab9879ae
SSDEEP
6144:EMWAV2z9omtJGm844wSJhgqE8EnIXprIXuaBDldujMi+4RhIR7u6hnUznw2Vm:Eqxm73JXI5rl8BWMi+C6l
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ExecWait
Remover
Setup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ