DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TestFunc
Behavioral task
behavioral1
Sample
99614dfa428a7b3e244fdcd72bec3d0afc0fa2da03f2c52899d7154662cae01d.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99614dfa428a7b3e244fdcd72bec3d0afc0fa2da03f2c52899d7154662cae01d.dll
Resource
win10v2004-20220812-en
Target
99614dfa428a7b3e244fdcd72bec3d0afc0fa2da03f2c52899d7154662cae01d
Size
16KB
MD5
55772adfe5aedc65ab25af5c44290160
SHA1
fb9d06e50aab8101f41d5b58232c470c82d45194
SHA256
99614dfa428a7b3e244fdcd72bec3d0afc0fa2da03f2c52899d7154662cae01d
SHA512
ff628798747f8fc5dc64f19fdbd1a6e1c2763ab41db6374a8d8ee0f4fdc6df85ed222c43e9d5f1b7bba8421a2d848b7ce4b6504362eeb06a5233b80c156e42b6
SSDEEP
384:fmeb/3yx6ptvTvTYVRLk3zUYzdAUuwnQF05cL3A:fPyx6TqRL+TAUncL3A
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TestFunc
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ