DllMain
xInstall
xUninstall
Static task
static1
Behavioral task
behavioral1
Sample
045f92211454af6c5ac1e02351eff21d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
045f92211454af6c5ac1e02351eff21d.dll
Resource
win10v2004-20231215-en
Target
045f92211454af6c5ac1e02351eff21d
Size
18KB
MD5
045f92211454af6c5ac1e02351eff21d
SHA1
89f4f205ed52f0341a5ed0fbbb3398ba2517f655
SHA256
1dee89e50ec7f40391745a1db5259fb048ec1d1682c829f465c525005ce0d67f
SHA512
a691548ec4e6bd38daad2ec45374facc0928908081d13ff145511098455a6d836a25eb30ea8eee2cfdf0cc7f939f989d485fccdcc1ea107cfdd41342f936e3e9
SSDEEP
384:AOoXQ4507JDdDSCVEJh4potrz+CXu5nOUlW+0lfpH2M:pwQ45QJZSC25eCXOMppH2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
045f92211454af6c5ac1e02351eff21d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllMain
xInstall
xUninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE