CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
Behavioral task
behavioral1
Sample
d07f540255dc43c62cf37193fce5789c1609654ef7ca93aab2d36ebd7219845b.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d07f540255dc43c62cf37193fce5789c1609654ef7ca93aab2d36ebd7219845b.dll
Resource
win10v2004-20220901-en
Target
d07f540255dc43c62cf37193fce5789c1609654ef7ca93aab2d36ebd7219845b
Size
274KB
MD5
84fb19c5ca1ebe125e59fe30653a3ffd
SHA1
21236e82028bd93dbbca18319207d4435cc6c8df
SHA256
d07f540255dc43c62cf37193fce5789c1609654ef7ca93aab2d36ebd7219845b
SHA512
000bd1546a176bc97b17d557eeac57b4b3f0dc029861ac65d752fc452d10494d0fa7366787e2323f86544cf9084ac94e4702cfb44ee4c3966f23496b162f6bc4
SSDEEP
6144:9Lt/XsiX7S+nqKA7i/6bxYm/v3ueMMW+z4tjAZ8ffzvmZvytI:5ZTG+nqq6bxr++kt6gzv8v4I
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ