DllCanUnloadNow
DllGetClassObject
DllInstall
Behavioral task
behavioral1
Sample
9870d1d2f4772932e1b2bb68732610b0_dll32_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9870d1d2f4772932e1b2bb68732610b0_dll32_JC.dll
Resource
win10v2004-20230915-en
Target
9870d1d2f4772932e1b2bb68732610b0_dll32_JC.dll
Size
351KB
MD5
9870d1d2f4772932e1b2bb68732610b0
SHA1
43bbf795cbbf79476a42d261db922e9af9501cf0
SHA256
fa09a02a6186df75b4d054e55adb9b7d68a5989496a11a5d147f64a905f4d041
SHA512
6856a24a78b4671b6d571ab90c158c5b5050afab7b7b4bc3b1acf23eabd867a63e49ffa87477bd6b0cf61d508d058944bc284bfc57e97f7c9ebfb9c3618b55ea
SSDEEP
6144:8BtARd7OLgxGhZs7t/El9zO07aC1Dt3jsrRHglzY4ALjxTaiunwwzYcTpc:+tuJO5Ds7tcJOS1h3IVHglUpjQ5pc
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9870d1d2f4772932e1b2bb68732610b0_dll32_JC.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE