DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
0c27d064bdcf107ed49da14e8d464f75.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c27d064bdcf107ed49da14e8d464f75.dll
Resource
win10v2004-20231215-en
Target
0c27d064bdcf107ed49da14e8d464f75
Size
105KB
MD5
0c27d064bdcf107ed49da14e8d464f75
SHA1
b3dc21596418b82961a0d5cc835657576994158a
SHA256
a0cb8ea2e7ef390c5a6225f646363fcdbf99a93504adc4dab133eedbeab5ff93
SHA512
8f7780f49c8c824f1c4e44c5e5a6cf4f3bd4921e31c2068dc267efeeae553a9f84741e9cd5fc82a839c912a9c8c46ffccb7cbc5a08f0ed9b55747d662ca0a49f
SSDEEP
3072:gEvoMNFeKwrEw2xtaDQf1k5WhK0m26Cv6NZZOPJ:g+owxw2/aTWVuCv6NZwJ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0c27d064bdcf107ed49da14e8d464f75 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE