DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0b6d4706aa07cd3337d07a0cb4049a53.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b6d4706aa07cd3337d07a0cb4049a53.dll
Resource
win10v2004-20231215-en
Target
0b6d4706aa07cd3337d07a0cb4049a53
Size
57KB
MD5
0b6d4706aa07cd3337d07a0cb4049a53
SHA1
19ae591e1f0aaa4dd0642854289fa0a51b746f94
SHA256
960341f23b3504857a6d9c751e3328bc24091321e9928c431f05f3e8585b960b
SHA512
f02e903e1cfb66b817cbe116c3e7c75a65664e175171a50c962f2e4ddd923d10029a0cf92e75f3b7447fc392cdfb496524750f6183fb38d8db962d03c8dada41
SSDEEP
1536:1/0yyubckwzrV+UGkopcsz8buCx6k2FcvHinouy8:x0A6V+eopcUBQ6rFcyout
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
0b6d4706aa07cd3337d07a0cb4049a53 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE