DeInstallation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunAsIcon
Static task
static1
Behavioral task
behavioral1
Sample
04562c385c5b84a52326cfb6e6ef1011.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04562c385c5b84a52326cfb6e6ef1011.dll
Resource
win10v2004-20231215-en
Target
04562c385c5b84a52326cfb6e6ef1011
Size
39KB
MD5
04562c385c5b84a52326cfb6e6ef1011
SHA1
2e917ecfea8b69e760696d1ac83414c284c19a58
SHA256
cabf3e8faed4c34fc4362cf0800bb5cc689516da69d6a913399c9678a38df17e
SHA512
d9e47fe930415af70ce78ec1bd11609f47e000a5183ee6669213f226bd4d8972c12665fd5ed02d4e18b0a5f18ded0a22844ba174d15fbeb16eba3d87d9f5e68d
SSDEEP
768:RdnBma7AIUpjZhpc+fzAddDaGwWiNcC1Gd8pP8UJGv:n06+cdlzuESp0tv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
04562c385c5b84a52326cfb6e6ef1011 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DeInstallation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunAsIcon
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE