DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
a3742073853ffe930da998ad9866550c5809730f6df05cd26f27bfb0d14d0e68.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3742073853ffe930da998ad9866550c5809730f6df05cd26f27bfb0d14d0e68.dll
Resource
win10v2004-20220812-en
Target
a3742073853ffe930da998ad9866550c5809730f6df05cd26f27bfb0d14d0e68
Size
34KB
MD5
1554c452211eb74f19d6b4aa9d5dc025
SHA1
b541beb613e169e1d5a6943a5fc3e20d76129889
SHA256
a3742073853ffe930da998ad9866550c5809730f6df05cd26f27bfb0d14d0e68
SHA512
3bea24fa81a0ab8bf97d7cd85f310cb48e639222f07aa6fd68214fade11263ebf005820c5ebf0a83ddf544408524524b8a4ef8011dd65d4b99d1ad509e423f22
SSDEEP
768:X3WRgJA29vgmAhQr8sFZn7CEFj2p+zX5l19cn6oL:X3WRgzVpAGr8x0plA6oL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ