DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
333ccb56a851e5f0fa9745f095c6c1a9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
333ccb56a851e5f0fa9745f095c6c1a9.dll
Resource
win10v2004-20231215-en
Target
333ccb56a851e5f0fa9745f095c6c1a9
Size
29KB
MD5
333ccb56a851e5f0fa9745f095c6c1a9
SHA1
8c934ba1783620b4952f1cd154f260d85e3438a0
SHA256
cb71c6a161ddd912b6bedac3d513f3c98d62a16cb93d29f82ab9b8b592fad51c
SHA512
63c7f2b7fffd256cf6bf526a621434ec2d87e534d43020b3e5793a46555495c265a4c31f466114783120f6ab5d11ae4856fd88ce8d0a184401fb75cd44c10a30
SSDEEP
384:SahblUp6GiuDVG/iuzEyU9YuJ0msrgORweG+8v7h5wTfPyQPJw2wHKhqEeIwHKhh:BblUcnh6uVTBY2+7h5a3Ew
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
333ccb56a851e5f0fa9745f095c6c1a9 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ