DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
2af59b4775f2f2011a45df4c2ab91c9e.dll
Resource
win7-20231215-en
Target
2af59b4775f2f2011a45df4c2ab91c9e
Size
8KB
MD5
2af59b4775f2f2011a45df4c2ab91c9e
SHA1
bbdb35f8e37d91d63f1101012012b661ce19dc6f
SHA256
edc1307963d6458a76a5b8933053cc79c47b3c92f7f7bbb07fb136f534ff2aae
SHA512
1719174da484de36d9d7cd5d251658daf35075e13787c956ff84c26d53bd256adcb610d0e23c51ba392c22f635f3961ae1d019279bb4f11eb69c674e076e348b
SSDEEP
192:UzfQu/IfX0k13sAeiU/4loGKzmWITWP65Yc3d9Im:Us5fEk1gXeoXmWI6P65z3da
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2af59b4775f2f2011a45df4c2ab91c9e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE