Discovery
DllRegisterServer
Behavioral task
behavioral1
Sample
b39d8342029e36f2d1ffd5e5210ffc1af48d4ec3e6fae91947122c7a75384e15.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b39d8342029e36f2d1ffd5e5210ffc1af48d4ec3e6fae91947122c7a75384e15.dll
Resource
win10v2004-20221111-en
Target
b39d8342029e36f2d1ffd5e5210ffc1af48d4ec3e6fae91947122c7a75384e15
Size
54KB
MD5
2cd0b47e7da9d39bc39e513b79af9358
SHA1
2f33496a7346f76a33436064aeee5938c7c3db7a
SHA256
b39d8342029e36f2d1ffd5e5210ffc1af48d4ec3e6fae91947122c7a75384e15
SHA512
0ef2c9ddf536af96a761b5cc397da46f45b256d720689115eda3685c89fe634b015dd35026e69841da80f81f79e4b7b2e7d4033cf6347532dfe489093980b740
SSDEEP
768:3XO6IFE0wGQiExUinE4nKQRREleTGqAn76skevr+qBD32FZEYywMyRxZFwKv/nWr:37jvnKAqMRAnmgz+4C05wM4xkKv/Ra
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Discovery
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ