DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
9ec9eb71ed4315f7e0cd7997ffde37ab81d3a524320fd7956cacef6cd00b7d67.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ec9eb71ed4315f7e0cd7997ffde37ab81d3a524320fd7956cacef6cd00b7d67.dll
Resource
win10v2004-20220812-en
Target
9ec9eb71ed4315f7e0cd7997ffde37ab81d3a524320fd7956cacef6cd00b7d67
Size
52KB
MD5
6ad0e357fe588d6d91d79e600b728b72
SHA1
12e4cf1e67deb20ec2d8479cc5a337416732aaa1
SHA256
9ec9eb71ed4315f7e0cd7997ffde37ab81d3a524320fd7956cacef6cd00b7d67
SHA512
5823a1e2f7019df2e264a6ec3ef15084b77fb943b56e9fb5bc50291b7adaa2586d024a4a5ee969a462ac7a0942190d21ac3ee47263b5f409312fc7620363356b
SSDEEP
768:JXAtO1N68ywKkJLQUmcZYSe1cOR5TwOp3ppNRggWSkx66eXftLO1yIeDEsoJLrrm:JXAA6QKLCnO5ogJtFYyIe+L/cxnouy8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE