DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
1ebb2f08542438ce3396b45e8ccbaac1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ebb2f08542438ce3396b45e8ccbaac1.dll
Resource
win10v2004-20231222-en
Target
1ebb2f08542438ce3396b45e8ccbaac1
Size
63KB
MD5
1ebb2f08542438ce3396b45e8ccbaac1
SHA1
59604602a894ebccc1c3b70a09581eb07ba48d5d
SHA256
755803a9462f777acd8b1364a4bc27533f78c7f0ad05a94c047418f44070fefd
SHA512
ad5013337e39cba4a7a4b5254a2828b3a6d878aae05c8bdccd118185d93a3aae4154b34343d9b97e0b228e1709475b3e16a9d0ed163b71cbaec2b3024c3d9b13
SSDEEP
1536:JYIpdLsP5ETy3vVPCppE94aBlNvENcQJHiMkx7:m8gGOFCTE9nBEyQCMk
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1ebb2f08542438ce3396b45e8ccbaac1 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ