DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ba5e5b302cf599b512f10344af8684a5001ada42e4c2571add48166d52a8fb0e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba5e5b302cf599b512f10344af8684a5001ada42e4c2571add48166d52a8fb0e.dll
Resource
win10v2004-20220901-en
Target
ba5e5b302cf599b512f10344af8684a5001ada42e4c2571add48166d52a8fb0e
Size
67KB
MD5
2713797ea6415f82ed9d2f9d0a44fb97
SHA1
525a03d4f7530e3b5074a15c1d60405e0fc81224
SHA256
ba5e5b302cf599b512f10344af8684a5001ada42e4c2571add48166d52a8fb0e
SHA512
a3e750dc73ff7641ef68c00c1039231b96cc39abbe17d8f8adccaa3c8bde9e521fd7e082406053ccae24d8a3df9d21e09f6c295f2b7fd3ffabbc6b81beb2fd5c
SSDEEP
1536:zrVnNncMcT/IQ5vWxVPWltrKDncu3Uq+PjNXR5nouy8dIZ:zpnpJ4tr0f3UqMNBpoutd4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE