DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ID
InitO
Behavioral task
behavioral1
Sample
a262003f08571bd8b677a028e5cf86550dc05ddcc45a919f8e13b29eb9030171.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a262003f08571bd8b677a028e5cf86550dc05ddcc45a919f8e13b29eb9030171.dll
Resource
win10v2004-20220901-en
Target
a262003f08571bd8b677a028e5cf86550dc05ddcc45a919f8e13b29eb9030171
Size
31KB
MD5
2d9a19a59936a36ed8c2828e889b8de6
SHA1
90ac5891ac851c2a4057ff5e5f267e4ac72ebe23
SHA256
a262003f08571bd8b677a028e5cf86550dc05ddcc45a919f8e13b29eb9030171
SHA512
d14c208f44d0b321faf3b54ff3c49dd384b549ddf5d5996f97da43f3bcab8cd3b287890fdba51a4cbc85db4bc641a4d6c8202c6da4965e50fa4f2d6782e38837
SSDEEP
768:LgVJJhmq4NsvbdkhyNh26APaXZwR13jP3a91hlVohkaIJ:0VJ2q4Cjrm73M9akaIJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ID
InitO
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ