DllCanUnloadNow
DllGetClassObject
DllRegisterServer
GetNewInf
Behavioral task
behavioral1
Sample
9c6e91ddd514e6bf6e19f2c4c831f20c0397bac874f7e349efc366fe787638f2.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9c6e91ddd514e6bf6e19f2c4c831f20c0397bac874f7e349efc366fe787638f2.dll
Resource
win10v2004-20220812-en
Target
9c6e91ddd514e6bf6e19f2c4c831f20c0397bac874f7e349efc366fe787638f2
Size
85KB
MD5
3cbcbdb4b278518204a6c8bb6af65a14
SHA1
83f53080101f28c2b721bbc192c5b8f4ddc5b993
SHA256
9c6e91ddd514e6bf6e19f2c4c831f20c0397bac874f7e349efc366fe787638f2
SHA512
2a94334b392ba91ae20e9e59a0d2d38781bd7fc039daa17ef91f7862faceefa0bfc14f3ed46d0c1d7b7878adb190cd7497152d6dc00baba0f7d2b6fe980cac16
SSDEEP
1536:lnMPxeiAlcz4vmRWripCQ9r8cS1reNtTDLn1M8f0Fe1CuYJqoUNkvjRWQ+ebv7E:lcRsHipb9r8R1reNRDD1Me0Fs6zhvFnI
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
GetNewInf
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ