LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
1941ab7aa73c90c3acfa71d6a6109626.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1941ab7aa73c90c3acfa71d6a6109626.dll
Resource
win10v2004-20231215-en
Target
1941ab7aa73c90c3acfa71d6a6109626
Size
44KB
MD5
1941ab7aa73c90c3acfa71d6a6109626
SHA1
69907e193ecf449cbba5f5430cfa9fc419ea4f49
SHA256
7fccd110b77bc503e462cce4fb932c1eef2d800ebb7551d59b56050d93a76178
SHA512
e2c7736ef079316eef8e935957cfd2934e16af97b1336577d635b066d74d2b79f7320bbb4dc8cb857c2b82fb9d63e2e7bd8ecbb0f0b2c37d8f6b7282d75488d6
SSDEEP
768:v302otazYoSj8cIrhw05EO7meow6Vry4j4EvuX8h:v3gYzY/8+0N6w0equX8h
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
1941ab7aa73c90c3acfa71d6a6109626 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE