DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
0c6012756a104ddf94a71a530ca831bf.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c6012756a104ddf94a71a530ca831bf.dll
Resource
win10v2004-20231215-en
Target
0c6012756a104ddf94a71a530ca831bf
Size
193KB
MD5
0c6012756a104ddf94a71a530ca831bf
SHA1
ac9ae914594a71e27136898dbd7bfb882273445b
SHA256
94f75e7e7c2d5962539a38df0f9345fee55e6bfbf33adfa49297bfb3f0cc348c
SHA512
1205bf657ceb84d2110b85ee4ca937c305acaf59d07880824633bd994ea0b24a9bcc81a1c46f16394b6e2d1502ead18f8c238c78c0155a503f70d99312bb1304
SSDEEP
6144:zC1iR/21KDjBFpw30pfd7g3yU4ERUlOgUuU5S:zC1m/2SfpnVUdUlOgu5
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0c6012756a104ddf94a71a530ca831bf |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE