DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
21a17b0abb7c58cc415aaae06d250ca6.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21a17b0abb7c58cc415aaae06d250ca6.dll
Resource
win10v2004-20231215-en
Target
21a17b0abb7c58cc415aaae06d250ca6
Size
17KB
MD5
21a17b0abb7c58cc415aaae06d250ca6
SHA1
854ae0dfebeb07cab349fba356d59637062bcb00
SHA256
71a1ca105c9e70c032b1b8519b78045f9d4460bbcbee2c42d0b19ccca77e79b7
SHA512
21e349ac10d0993c0d2eefc6a1ecb4d78392f92229dfc311eee39c64a33170eed36aa5006d195adf556e91a7c6835aa198cf485259e28bb7fa60952f1d053aec
SSDEEP
384:DMjMQGhhIv34Dn9hdhi0DY6lM7D3wdKRLaNJawcudoD7U:Ysh+K9hdhiJeK0nbcuyD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
21a17b0abb7c58cc415aaae06d250ca6 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE