DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitDll
InitO
Behavioral task
behavioral1
Sample
957249880a4a1bd740bb2e842551ae12db0e9766db4008daabaa9de20b7afb5a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
957249880a4a1bd740bb2e842551ae12db0e9766db4008daabaa9de20b7afb5a.dll
Resource
win10v2004-20220901-en
Target
957249880a4a1bd740bb2e842551ae12db0e9766db4008daabaa9de20b7afb5a
Size
32KB
MD5
f78b82fdaeb7351222ea0b2a59417870
SHA1
64655564c28d82fdc28bc483f50bfac2b2b088a9
SHA256
957249880a4a1bd740bb2e842551ae12db0e9766db4008daabaa9de20b7afb5a
SHA512
e01fa15c600527e111bfbd468b7be140ca0753bb263978fffd4a9126542033521775f9d1ef98e737866ed010b29ccdec97e508bf583631905e600821d89f6217
SSDEEP
384:ntDYwYNRHuvCLlKz9rtPcHWzSLfNtwSzEcVbxrH5r1SMscpPpJlpyRBkzK7qmDVc:NLYHHoCLOhUtjEAbRKyWRBkFmVc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
InitDll
InitO
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ