DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bb78b5d6225319a2eaf205cd029889376a859fe1c1b3a03800c1c0d7b3fa68da.dll
Resource
win7-20221111-en
Target
bb78b5d6225319a2eaf205cd029889376a859fe1c1b3a03800c1c0d7b3fa68da
Size
270KB
MD5
4ad5497c9f1f4fa63e4015d6d1885d61
SHA1
f7e26ffa3bb8d38198759c3ec703a420f24b0a19
SHA256
bb78b5d6225319a2eaf205cd029889376a859fe1c1b3a03800c1c0d7b3fa68da
SHA512
45184f48688bb0069f8406c90f3fd7e61cf9552fbf37f1921c4ffe562941a24818218bb5263517630a13f27f3331affea1910417774699f8d371ce3258ff4caf
SSDEEP
6144:yEs+ID8Tw1sVUtdDTSSzbQXMJq4xBH+rmnFMOIgKQ7tPqo3HCyv6:y1+Y8TSBDTS2bQXMJtH+yNIgtFX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE