DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
a68fb6cbf428efe588811a1412609f0600f67a4c4cc171502b619cf263ac1ea2.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a68fb6cbf428efe588811a1412609f0600f67a4c4cc171502b619cf263ac1ea2.dll
Resource
win10v2004-20220812-en
Target
a68fb6cbf428efe588811a1412609f0600f67a4c4cc171502b619cf263ac1ea2
Size
24KB
MD5
0796a8ebb459827a4a6f694ae3e9f7a0
SHA1
ecb0fe2560c1aa7b3616baec35d178ce0ca86306
SHA256
a68fb6cbf428efe588811a1412609f0600f67a4c4cc171502b619cf263ac1ea2
SHA512
956b252113307ebf2ed01e615b3a42371a36f5c59fc72baac7f673c4112cff2d904e6b4c1c60f14ea7a5e3d534c4ab96b08557b2f8258acf5f336a190d35baeb
SSDEEP
384:vDtKK0hjS+l4XrNlQVqXNN785ruu0AorBIGenA6Kf/X/W5fXmHN7SO:vDtKK0hm+qnQVSV85rv0AoSnAnb7X
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ