DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
93ebee6de7642d8a839b3f3273527a96106020bbaa285cf04938420110c2cac2.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
93ebee6de7642d8a839b3f3273527a96106020bbaa285cf04938420110c2cac2.dll
Resource
win10v2004-20220812-en
Target
93ebee6de7642d8a839b3f3273527a96106020bbaa285cf04938420110c2cac2
Size
42KB
MD5
07ad30bee6fd8534e016cec377a7d044
SHA1
111969da340769c86ee77d99153f5f3fbc4926e8
SHA256
93ebee6de7642d8a839b3f3273527a96106020bbaa285cf04938420110c2cac2
SHA512
8995e7912a06df9f6151720b0f0989a7ca659fe4e69cd7a3dae6c5a5261c1f635bd83ca3aa45d97fcda2cf0abb3d45670ba9c40dc490062ff9140280d9ea02cc
SSDEEP
768:x3WjKnsflFgTNjPVHyIMaeLMUAF1V0uv+xP4AxvYjougOKjR:RlOFgTNjP1y3vnAFjQQAYjouWjR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ