DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
00f8608b008bb3f05bbac561431a261e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00f8608b008bb3f05bbac561431a261e.dll
Resource
win10v2004-20231215-en
Target
00f8608b008bb3f05bbac561431a261e
Size
88KB
MD5
00f8608b008bb3f05bbac561431a261e
SHA1
c5bee6bf01e73e7bff62755049583a8271588af3
SHA256
bbfaf5a6d5d4403c720f86d5d5cb6ce9f6bb90cc69b2739ce98db639ba471588
SHA512
36d73fb9c44161ff64e9714d01d25615aa84a585b370e355177f5b26fcfbf91f69a3b95e692940887278b9a13dfd52c4574ea2c601632a01826dfb0d2a5f1552
SSDEEP
1536:2bHpXujNSqTQxbu8ZA21rL3Cj7W0zcKNGWnD3moImmF5EMhdKuWzpoeIBcfNthfJ:2zojNSbxS8uyey0wInrm+mLEMhqtoeIq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
00f8608b008bb3f05bbac561431a261e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE