DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
ba0caa5292b1d5cb91ca4993a19381d35a2a1740d11821b3e690745f8816533a.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ba0caa5292b1d5cb91ca4993a19381d35a2a1740d11821b3e690745f8816533a.dll
Resource
win10v2004-20221111-en
Target
ba0caa5292b1d5cb91ca4993a19381d35a2a1740d11821b3e690745f8816533a
Size
90KB
MD5
4f04bb5ebddefb8c7aa3c51645e3be6b
SHA1
ec8482f9bcb3b5dda634406d4ae574c88957ead0
SHA256
ba0caa5292b1d5cb91ca4993a19381d35a2a1740d11821b3e690745f8816533a
SHA512
11a4921abf0371bdf5651bf0c33ab7188f4c90d7ed787bd5089905968d9f69c6e635a9dcde3093cb63ea23649bdd1d56ca7e3afbd42b186e35f3a4577af4f0c7
SSDEEP
1536:iXa4Jf6Y1o2XfZnWFVJFYJJt8e4bBAit6muEvJpRhr/c:+PXC2XaAJJtPMBAi87EZFc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE