DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
9ab45b2dc231245940d42c7c5ea69410b1bca7eed17dfc5820e69775c07a0c07.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9ab45b2dc231245940d42c7c5ea69410b1bca7eed17dfc5820e69775c07a0c07.dll
Resource
win10v2004-20221111-en
Target
9ab45b2dc231245940d42c7c5ea69410b1bca7eed17dfc5820e69775c07a0c07
Size
48KB
MD5
a4507c510b742bf57716e618db172639
SHA1
7fe298f0777f8b63662593c3ed765628708315a1
SHA256
9ab45b2dc231245940d42c7c5ea69410b1bca7eed17dfc5820e69775c07a0c07
SHA512
d0241f9687ff11d3067856e8e12a7eb7e150df3f595b4e3fa073642e149e7ea23ee1db6f5da785c48e0a7282992e9dff819f4c7fbbd477c07b2c7e92ae3bdea8
SSDEEP
768:38XtX7D78bDhgtYbg5xrwPOCWlR9dh0YqB+CH5gaTHqB+qeBAZuvsnbcuyD7U1:YHEDZSkmRYBzH5HKBMjvsnouy81
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE