DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ee45865d718739a389d81bf5f9a78bee8afdadeff2e674d715c22a4d789dcf30.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ee45865d718739a389d81bf5f9a78bee8afdadeff2e674d715c22a4d789dcf30.dll
Resource
win10v2004-20221111-en
Target
ee45865d718739a389d81bf5f9a78bee8afdadeff2e674d715c22a4d789dcf30
Size
408KB
MD5
88439aaffa8e89d686062fd2f3b470c6
SHA1
5c8f2aea9c3eccd3051d1efde7469b5223740ea1
SHA256
ee45865d718739a389d81bf5f9a78bee8afdadeff2e674d715c22a4d789dcf30
SHA512
a55809e809bfbfd082bb2484e5df214c4a9cd6b841cc27136c43d40b6df6f1e526c76439886643afa7d6dcdd9fbffc19dc0d7d74e5e989bf32818f7e5f8a4f30
SSDEEP
12288:l0INxVNQrZBIBXPLXsfZeO4ZrWoLAl+Op2roHvHDZiNoS:j/NoET6otk2Mv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE