DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
cad46ac6ec9bb2a25001f0cc32ed217019586c59fd1d32b81cf3113a969a1836.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cad46ac6ec9bb2a25001f0cc32ed217019586c59fd1d32b81cf3113a969a1836.dll
Resource
win10v2004-20220812-en
Target
cad46ac6ec9bb2a25001f0cc32ed217019586c59fd1d32b81cf3113a969a1836
Size
42KB
MD5
ff0d4683fda02d75c87b22263574ea64
SHA1
6a2dacc84e5136540b55e21243d91d7e2719f946
SHA256
cad46ac6ec9bb2a25001f0cc32ed217019586c59fd1d32b81cf3113a969a1836
SHA512
18ead7680865299ef227e25135662bc324fcfce71c9f8e964901207602da7a6c5b74c911ffba99ad7b10847d406343703eee9fd53aacc575119be3b17086ccc9
SSDEEP
768:3NRn04ThCyqll/+GCc1ecw8TTlyGDIZ/kUr6FoFAH2lxxk36OPcDdJvL:jnXTMy22N8NxDIyUe4AHn36ZJj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ