DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitDll
InitO
Behavioral task
behavioral1
Sample
db64a64310e3e05be201b4beff30f1ff8b2ea7cace5398f85a6240e3876519d9.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db64a64310e3e05be201b4beff30f1ff8b2ea7cace5398f85a6240e3876519d9.dll
Resource
win10v2004-20220901-en
Target
db64a64310e3e05be201b4beff30f1ff8b2ea7cace5398f85a6240e3876519d9
Size
48KB
MD5
ffd28190a4e2966c7df07ad222b8eb40
SHA1
4cbad8e529921897a6c3fb438b261bbaba6510af
SHA256
db64a64310e3e05be201b4beff30f1ff8b2ea7cace5398f85a6240e3876519d9
SHA512
7d10d1456e46b3e9bcb46844873fbee27f5b32cc5cb97a595d74bfe1cbc23f0e57277cb2922e1fb13005f57e068c155c7b30b1e04e9d52417afebaed5a0c297e
SSDEEP
768:X3+JXyrs8EYrtvtBGUBjjReInI49QoTnPSN6QPgQjLXWnFf8x0RRJ1TUxorsu7:X3+dy/1L5AII1ojGdjLGFf8x6J1QUv7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitDll
InitO
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ