DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
198569a413f1a18008bf189b7e3078b0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
198569a413f1a18008bf189b7e3078b0.dll
Resource
win10v2004-20231215-en
Target
198569a413f1a18008bf189b7e3078b0
Size
118KB
MD5
198569a413f1a18008bf189b7e3078b0
SHA1
dd69513cf2d8ecfa21f2e04e617d67eb1eff77b5
SHA256
71a068a1b4e5a12e580572acbf5655643fb21d49a25c76b3a45233b74077d5b8
SHA512
1bea24882f49067b6c8af66007ec3c03707858b40259c48839ca29350f6eec6378e5440e1f1050ebd5288875e2222c455ca4b8857cc417a24686d32e998181cf
SSDEEP
3072:1BP9VT1E5OyqeNrJStcQHc695qaCm7vxBM6l3fx48:hVTC4yZNrJStcQHcY5xNvxlZ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
198569a413f1a18008bf189b7e3078b0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE