DllCanUnloadNow
DllGetClassObject
a
f
h
o
s
Behavioral task
behavioral1
Sample
93c1ca70f55dc522404c5cd26c68cc8b4ac71005d7eac0488d53a5862295ca63.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
93c1ca70f55dc522404c5cd26c68cc8b4ac71005d7eac0488d53a5862295ca63.dll
Resource
win10v2004-20220812-en
Target
93c1ca70f55dc522404c5cd26c68cc8b4ac71005d7eac0488d53a5862295ca63
Size
67KB
MD5
6251799928d4686f466e78156ace4bf8
SHA1
e3df1ba28efb317646bec0a23c5710a502aa1b6a
SHA256
93c1ca70f55dc522404c5cd26c68cc8b4ac71005d7eac0488d53a5862295ca63
SHA512
882065158f830325f2e761743d0dd1a3323f2d697bf18734b8535ccfe77b430c3c1022da4cb15f379e1ce6cd00319842307adb1fdb0c7e815de4757663a0c27d
SSDEEP
768:j5bieVmyfBYFE5gf+GPHpe9Q4klGALredT9Iw4VinbcuyD7Ud:kGrfBoE+qi8DdT97xnouy8d
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
a
f
h
o
s
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE