DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
5f4a9ec68bb91b4c3fcd87f18f557c5b.dll
Resource
win7-20231129-en
Target
5f4a9ec68bb91b4c3fcd87f18f557c5b
Size
233KB
MD5
5f4a9ec68bb91b4c3fcd87f18f557c5b
SHA1
060e6aeb119f709674e74cd52396c731717b14f3
SHA256
bd1fa99194bff01663a74d1effb3086c10eb245d05e69f36ee5ba006ff13dae6
SHA512
8dd42cde734d5f543cddd75f829a2fb8693d3ec1bcf2eb1d797e5ce05455839e3487001942cd0e623b7ccbc8a0bb3a05f29c6bda49ec29d3d6d8cc2a9ea44e9d
SSDEEP
6144:qV+JW11yNbsO1o33aFpmGaOaNjYEu7eVHTKZALSk4oSQ41:qgI1bWe3aCOa6ECeVHTKCp4oSQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5f4a9ec68bb91b4c3fcd87f18f557c5b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE