DllCanUnloadNow
DllGetClassObject
Polngme
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
ab960b0ad53eb8cb86606703cc9d34ab7155e777573dfc41dd7d61993e2f5a1f.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab960b0ad53eb8cb86606703cc9d34ab7155e777573dfc41dd7d61993e2f5a1f.dll
Resource
win10v2004-20220901-en
Target
ab960b0ad53eb8cb86606703cc9d34ab7155e777573dfc41dd7d61993e2f5a1f
Size
70KB
MD5
1126cbd4deecce759487853725265f74
SHA1
795ee7f49618a47d2a830e036f2d102581ee43ed
SHA256
ab960b0ad53eb8cb86606703cc9d34ab7155e777573dfc41dd7d61993e2f5a1f
SHA512
b0d416a4794185e7f3f217794dd1c727ed7992defaa75427d097b081293b4309d39f7d5acecbc442d48d7b8083cd01664077658ff04f29ea2e22d5acc6002701
SSDEEP
1536:2XLwtq0c49MKioFjSz1UFLE/dW5MMbKl89h9LMTlp/8zWqlLqw7t1FVSr77Gnoui:2XLwt/FiaU1Uq/dWFbNr8azD7VS372o5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Polngme
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE