DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
057dd213bf8d260d800e5f8371f89028.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
057dd213bf8d260d800e5f8371f89028.dll
Resource
win10v2004-20231215-en
Target
057dd213bf8d260d800e5f8371f89028
Size
60KB
MD5
057dd213bf8d260d800e5f8371f89028
SHA1
18a4616fed4165d048953c50fb991c8f737442a6
SHA256
fc580d4c4370e67cad0071ef5f4d05e6fb477a6e5d8da728313cf1b368bd8a9f
SHA512
2fb3f10536caae5f5bf85f41012790bdfbc55b69cebb7bbea5e4f8e6b1bb7c2c4f657e5a1e6b9e09ae66cf0cd1a1032122074d97593c39fc352297632cbcce85
SSDEEP
1536:3p4aarjstExr3xT7cIeYBVGaEnM1u/xbjRrOxR2w/CU3JNc0:Gapcl7cIeYzGlouVRrOO+CUZNc0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
057dd213bf8d260d800e5f8371f89028 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ