DllMain
DllMain@12
Behavioral task
behavioral1
Sample
aa471f9baa635e3e7387555572d248737d305c9994d0e410b64ae9642914e991.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa471f9baa635e3e7387555572d248737d305c9994d0e410b64ae9642914e991.dll
Resource
win10v2004-20220812-en
Target
aa471f9baa635e3e7387555572d248737d305c9994d0e410b64ae9642914e991
Size
39KB
MD5
9f7b8a6984e0f31f7db7848846e5d875
SHA1
2d24faeec8503167e4b7b5310cc9d9edfe627ff3
SHA256
aa471f9baa635e3e7387555572d248737d305c9994d0e410b64ae9642914e991
SHA512
971369134497149c5221732fdb442dde0a48876d582273d798a580fec863684a4c4d0ea51ae4985ceba801a56ae2c1a1730b9235b195edf0e7f30619afed75bb
SSDEEP
768:KeHvJ+Nocg82VEXl8P808SedanMwmXI2exb3O3cY6waim3WvUlQAS:lQ+9LVe8P80VemML27qcY6JVQd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
DllMain
DllMain@12
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ