DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetXLCommunityPlatform
Static task
static1
Behavioral task
behavioral1
Sample
027c3995128ccd10c4b39c6094d98b3d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
027c3995128ccd10c4b39c6094d98b3d.dll
Resource
win10v2004-20231215-en
Target
027c3995128ccd10c4b39c6094d98b3d
Size
269KB
MD5
027c3995128ccd10c4b39c6094d98b3d
SHA1
321e0c9d998ddae31edcda5d9d94bbaac98ced3a
SHA256
94295b3b6ae026876b15183b742fd018ae168e79c97b073ab015af26bd52a056
SHA512
04c1d3c441ff695baf370b35938642b43ed0c77034802fc8fa89580da4cfebf00a4821aadf7432f37a3a7c282ae193da15d95bf36e8b42eb61f703997d78f145
SSDEEP
6144:WADRYj5b49q9KPpLmEr8PyJcu1hF0OZsWJ+oLMj1Llh6HLajd:vDSpHKPpSZqhF0OZsQNLgBh6HLajd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
027c3995128ccd10c4b39c6094d98b3d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetXLCommunityPlatform
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE