DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ccc86018b05cd4b1f6cfbec2f5e3fd594c089fce3a48b8f327a28f2c95d9a37f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ccc86018b05cd4b1f6cfbec2f5e3fd594c089fce3a48b8f327a28f2c95d9a37f.dll
Resource
win10v2004-20221111-en
Target
ccc86018b05cd4b1f6cfbec2f5e3fd594c089fce3a48b8f327a28f2c95d9a37f
Size
17KB
MD5
f8703a06d0ddabbe7b4d5aba37d81ed4
SHA1
4e90234b2f76ae8a7a88220a5e57606cfe00ef70
SHA256
ccc86018b05cd4b1f6cfbec2f5e3fd594c089fce3a48b8f327a28f2c95d9a37f
SHA512
af69dc45bc7d66abd2a96346f9e7f81d5f9d4d2aa509e96d3949706e18fb7e1f07fd5e23452e41e718833ee375d9952bcfbeb0a50a066508b337310bc4cd0896
SSDEEP
384:Jaz2o+y6Z1Gqb7RzIjvd7VOvyZJyqbqIVPjjPPE9:J52OGdpyqbdVPM9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE