DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
9c1ca9e3999048dcb7ceef7018eadb8a6eb5178811f9599ea1a5a0b09f5b6382.dll
Resource
win7-20220812-en
Target
9c1ca9e3999048dcb7ceef7018eadb8a6eb5178811f9599ea1a5a0b09f5b6382
Size
116KB
MD5
934ce1742f7eb3f5f17fef41c24089bb
SHA1
861898042b69ed519026482cb3399e946c8c0e93
SHA256
9c1ca9e3999048dcb7ceef7018eadb8a6eb5178811f9599ea1a5a0b09f5b6382
SHA512
12dbd3ab65736387b33e2cefcf7e32b85d27f1075f9f36b2401baddefe90087cbdeaf73875a0d820a0d16d4456f96031c4c52f8c2006531376be56baa5bccad4
SSDEEP
3072:iihsMhNZW7L0E2oDASL4h9q9t+UQP+86Z/ro:Z3BWf0ej9/U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ