DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
f30fe3efb21007b736bea41b3cc44be3f32a302bf81ef2a1131cd90c650b05d6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f30fe3efb21007b736bea41b3cc44be3f32a302bf81ef2a1131cd90c650b05d6.dll
Resource
win10v2004-20220812-en
Target
f30fe3efb21007b736bea41b3cc44be3f32a302bf81ef2a1131cd90c650b05d6
Size
232KB
MD5
09cd9076f6859b95fb57798946ed501f
SHA1
03e787f912fac6d41bb27295b9ca48a4fb576767
SHA256
f30fe3efb21007b736bea41b3cc44be3f32a302bf81ef2a1131cd90c650b05d6
SHA512
81763e87a909b928880fa35b419844ff48de286ae44ab2fb388042e603c32d972d1a83829e7566b029f2315bdae407b3ea97fca38011d959cc43ee3a7154d287
SSDEEP
6144:5sHgkga30I/Tg/B+q4USmtov4xQLMzXeLmUVH6OeWr:+HgDsTgwhhmtov4xQLMrfAYq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE