DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
f23724fd34a707847b6cbc88ddebe82671cfacc9aab31c58060f5925edbf34fe.dll
Resource
win7-20220812-en
Target
f23724fd34a707847b6cbc88ddebe82671cfacc9aab31c58060f5925edbf34fe
Size
116KB
MD5
74d394da2be9525a380b5b3b59a93650
SHA1
da5116d85331b551f2e31929fa2d7aee9776680e
SHA256
f23724fd34a707847b6cbc88ddebe82671cfacc9aab31c58060f5925edbf34fe
SHA512
2cd15bb5f1d39f7097ff397e947539678c02908450da69bb3452e97aa314be6564b07c74d061ae12f1f2ba81001df8d65f2ae61a2f89404acd58c434379969f4
SSDEEP
3072:49c/0bl4CI0UODxMv5YV7mI97W6tJ3jdWwzXPygiJ:4a0blhIN5kW673j3zc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ