DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
013e5e93d2eef472ddaa5fa7e27c22a2d0d7ccd624aab4c7eb6479bab71b7150.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
013e5e93d2eef472ddaa5fa7e27c22a2d0d7ccd624aab4c7eb6479bab71b7150.dll
Resource
win10v2004-20221111-en
Target
013e5e93d2eef472ddaa5fa7e27c22a2d0d7ccd624aab4c7eb6479bab71b7150
Size
44KB
MD5
644f0d94991542812f85b5f6449da090
SHA1
657d89c7bf93b5b5fb3b3be2be3cc24aaaa716e4
SHA256
013e5e93d2eef472ddaa5fa7e27c22a2d0d7ccd624aab4c7eb6479bab71b7150
SHA512
9bd9af93da65b08e857045d80e73f5420a29ba40603e39f851617688c53d64e2bead23f400dcb50371c2098188589d44e0c25302449b57405f28b787d50b4aa2
SSDEEP
768:1SiomTq6cAq7xU4z7/rjTNLBje+w2k7Xu1/lJ4AmXmbvAb6a:UvT7KG7/75Ba/7e4p2DAb6a
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ