DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ID
laspi
Behavioral task
behavioral1
Sample
b5fa28a44869b50e8b635d305b926d4dad46e2aad61723c9dfe2adbb4f1999e8.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b5fa28a44869b50e8b635d305b926d4dad46e2aad61723c9dfe2adbb4f1999e8.dll
Resource
win10v2004-20221111-en
Target
b5fa28a44869b50e8b635d305b926d4dad46e2aad61723c9dfe2adbb4f1999e8
Size
34KB
MD5
6024339baf2d71fb1a0518a2b9afb9d7
SHA1
a88de3aaada4c0e2a7ef712cf58f1b8b768d3ce2
SHA256
b5fa28a44869b50e8b635d305b926d4dad46e2aad61723c9dfe2adbb4f1999e8
SHA512
2b8947d4f80cecde8b2991fa5a5a7ebb04472126fd2a6c4e4f0d17477fd88899201ccbe58c0aa4f25f1849e090c666a1fea0c4f59766702d108f51718149d414
SSDEEP
768:ku0OQgTdAKRQCw6oiNb1Bg7elx5SykeuLTxoh:X05AAKSCwKg7elxgyfuo
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ID
laspi
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ