DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2a044ec703b57bd3065f1e8ab55353d7.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a044ec703b57bd3065f1e8ab55353d7.dll
Resource
win10v2004-20231215-en
Target
2a044ec703b57bd3065f1e8ab55353d7
Size
79KB
MD5
2a044ec703b57bd3065f1e8ab55353d7
SHA1
068a6f0055d6bba3b8c26ba7ffd84fdbb16a8944
SHA256
8278433b1e8dbd976c99fd6b469c11026020bb0e0b230f4c8f98d10fbfb84ed7
SHA512
4fe4f332bdcc3e1a325b230c2856ffc3e4670aac39886004c615a722be6f6dfb85541116cc1e1a11a729fe45477525d0aee720c1875f911df75cf9b2bbe955b9
SSDEEP
1536:BUyPonBRonj0ZUQaUf4GIaMjmrrn3TBY+sDPjZLH8oXh:BboBWU3aBfmrT3TfOp8oXh
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2a044ec703b57bd3065f1e8ab55353d7 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ