DllCanUnloadNow
DllGetClassObject
Overview
overview
7Static
static
7FastAIT200...XE.exe
windows7-x64
1FastAIT200...XE.exe
windows10-2004-x64
1FastAIT200...IT.exe
windows7-x64
1FastAIT200...IT.exe
windows10-2004-x64
1FastAIT200...rt.dll
windows7-x64
1FastAIT200...rt.dll
windows10-2004-x64
1FastAIT200...er.exe
windows7-x64
1FastAIT200...er.exe
windows10-2004-x64
1FastAIT200...ns.exe
windows7-x64
1FastAIT200...ns.exe
windows10-2004-x64
1FastAIT200...��.url
windows7-x64
1FastAIT200...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
FastAIT2007_Crack/ChnEXE.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
FastAIT2007_Crack/ChnEXE.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
FastAIT2007_Crack/FastAIT.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
FastAIT2007_Crack/FastAIT.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
FastAIT2007_Crack/KAVPassport.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
FastAIT2007_Crack/KAVPassport.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
FastAIT2007_Crack/KPGMaker.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
FastAIT2007_Crack/KPGMaker.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
FastAIT2007_Crack/KingTrans.exe
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
FastAIT2007_Crack/KingTrans.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
FastAIT2007_Crack/安装说明.url
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
FastAIT2007_Crack/安装说明.url
Resource
win10v2004-20231222-en
Target
4fb7907c0b8529f2aaae734d0f3d73cd
Size
1.2MB
MD5
4fb7907c0b8529f2aaae734d0f3d73cd
SHA1
610a36fb67d21c0ccc5714f74295e3a335e2ac91
SHA256
03048b5610946bbcbefc7273498270e06fb376bae359f08bb4ecb7ab9afaed95
SHA512
70093cc29562bf69425e76484c7610279a93eebcd2d1a1848db9e473448cc2923f6536ed6f88d430e153d3bb361da79b0ec14f83f6e55615c8b69221e44b6fca
SSDEEP
24576:+IdghmAncN0AELsbmZjV8vO2zGZ3d4ipSTxTdXbNsW:xghmA+0AsFjV/2iZODxhiW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/FastAIT2007_Crack/KAVPassport.dll | acprotect |
Checks for missing Authenticode signature.
resource |
---|
unpack001/FastAIT2007_Crack/ChnEXE.exe |
unpack001/FastAIT2007_Crack/FastAIT.exe |
unpack001/FastAIT2007_Crack/KAVPassport.dll |
unpack001/FastAIT2007_Crack/KPGMaker.exe |
unpack001/FastAIT2007_Crack/KingTrans.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE