DllCanReloadNow
DllUnregisterServer
Behavioral task
behavioral1
Sample
93846223fc305dd4d0c327ba3cf2b025224c85f72e15a07aedd49b4e99be05f6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
93846223fc305dd4d0c327ba3cf2b025224c85f72e15a07aedd49b4e99be05f6.dll
Resource
win10v2004-20220812-en
Target
93846223fc305dd4d0c327ba3cf2b025224c85f72e15a07aedd49b4e99be05f6
Size
24KB
MD5
01f9dbe74f2c6ee0cc2965b18907ec63
SHA1
619c919a91fcf53ec4c83adc51e67627e1aa99b7
SHA256
93846223fc305dd4d0c327ba3cf2b025224c85f72e15a07aedd49b4e99be05f6
SHA512
69b07574cdb07ee1e1a256105ba5816d2b2f250c1a2b48fc48d8e12ba35eb980fd4dd558f83c22d85e84acfb47f265ff5717370f469940703e296cbf500bd058
SSDEEP
384:NEHEvAZWk7AOtJO0kPWkomm9C6CPntw4NC7tJOpCDVg8ghgxM:NQ1kqJO0yfy4NCXOpimgxM
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanReloadNow
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ