DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
b2eb90ce99524b86808124e28e4ee79097a03b8eb90f4da4808b248fff69f91b.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b2eb90ce99524b86808124e28e4ee79097a03b8eb90f4da4808b248fff69f91b.dll
Resource
win10v2004-20220812-en
Target
b2eb90ce99524b86808124e28e4ee79097a03b8eb90f4da4808b248fff69f91b
Size
43KB
MD5
1b451a00a2370d9f07b485ebcdbf5366
SHA1
3643b18332af9424ba6edc7a80ee135a176d06e7
SHA256
b2eb90ce99524b86808124e28e4ee79097a03b8eb90f4da4808b248fff69f91b
SHA512
bce285bbdb94398df6f92ef77dcea16ddd9163d101846d36df21d792d76d5926d667b554a48b41577845fd2b79f3a14f736f6a63640fe3e7c29c9a90e795ace7
SSDEEP
768:S4FFemkTxEhm/ThVHsH6fLtdKoRBRpxxbZCMaeSnebQFZpdf9hFQ9XR54yyCjTEj:lFFIdE0t3XXHRpcMahnZFZzkH4yPjT16
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ