DLLCanUnloadNow
DLLClose
DLLGetClassObject
DLLRegisterServer
DLLUnRegisterServer
Behavioral task
behavioral1
Sample
d9faa08ecded6da917c07e5f7c168e388e73531a77affc7363daf1d8248adfd4.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d9faa08ecded6da917c07e5f7c168e388e73531a77affc7363daf1d8248adfd4.dll
Resource
win10v2004-20221111-en
Target
d9faa08ecded6da917c07e5f7c168e388e73531a77affc7363daf1d8248adfd4
Size
14KB
MD5
f2b94f0f84685c979248471d75f319f6
SHA1
f0d65060c1ae3e75ad730bb533e3aaf3f68c406d
SHA256
d9faa08ecded6da917c07e5f7c168e388e73531a77affc7363daf1d8248adfd4
SHA512
4fdcdc695d8b9b48023ba4f9fa3ec80869767bb43ce64d16366371dfc77538d74d15b3f17a49473bbe122b446aa524dfa75fb3f92fbc697286a9f8c2b9ec84e7
SSDEEP
192:KSdzBynDQ4R6fVKz4sy+yZijXPU0qp+Hm1w8qrWvC0nyogfCYrkSrnf2Nrkbg:KnU4odKz43478Jsus6vC/TfPrkSD2lk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DLLCanUnloadNow
DLLClose
DLLGetClassObject
DLLRegisterServer
DLLUnRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ