DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
9e79c2c7e42ed29c96ec2d2113f4cf21e6ee27d89463953cf56dba6d8fd6e912.dll
Resource
win7-20220901-en
Target
9e79c2c7e42ed29c96ec2d2113f4cf21e6ee27d89463953cf56dba6d8fd6e912
Size
116KB
MD5
a0feefaa539e8fb54a23b230e5bbcc3e
SHA1
588423bd7350e9e14712ad36c7a711f5f4014960
SHA256
9e79c2c7e42ed29c96ec2d2113f4cf21e6ee27d89463953cf56dba6d8fd6e912
SHA512
d30a0898e6d99c654196ae12cefd90b31d8b5814481f4286e860bfaf6a21471af44be221a1aba8c42670261177b5c85ce5ae1d751275c9d76ef58d7b7ab164de
SSDEEP
3072:RfKEVUtM9aHXQhUFVJe8ZiveDWPHwKPrCl2la39KbliTyj:RiYUtM9aHg+JNNqPwKPrCl2K4iWj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ