DllCanReloadNow
DllUnregisterServerA
Behavioral task
behavioral1
Sample
f9710cf7fd4ba68fb27b68aa29ac0f868365e7cae59f89b5c5372619c5be0153.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9710cf7fd4ba68fb27b68aa29ac0f868365e7cae59f89b5c5372619c5be0153.dll
Resource
win10v2004-20220901-en
Target
f9710cf7fd4ba68fb27b68aa29ac0f868365e7cae59f89b5c5372619c5be0153
Size
33KB
MD5
f5dae78c2e48798007d42241e0432ad4
SHA1
a19c13c73adb57ada9cff558de208b240569bac5
SHA256
f9710cf7fd4ba68fb27b68aa29ac0f868365e7cae59f89b5c5372619c5be0153
SHA512
a19bcee2d26bd33281feba103d911743706c593bd21c5c6e4d915a996fe93a40d21d329d7ec453eefe7ef2092eb62b8bd9202f4a6a03dbabd950237b8b9b77bd
SSDEEP
768:3eOyM4kfWpGnyaictck1ztT8kCx00JHQl696QKDkmgEv3JZE:3XyilCctck1ZTcbQwjKDkhE/JZE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DllCanReloadNow
DllUnregisterServerA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ