DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
36cdd4da6a61393d8532fe6ea877bd47.dll
Resource
win7-20231215-en
Target
36cdd4da6a61393d8532fe6ea877bd47
Size
109KB
MD5
36cdd4da6a61393d8532fe6ea877bd47
SHA1
73f3e65bc1bfbc70252ee81935605552b921dbea
SHA256
51bc9458b1bc8d4b70dd683ce54782980ef2886252453bf1322353d0c66c2120
SHA512
9eb8d8c14e6a5a1d3d2b685a79f2f5a777ba1995ef2b8275e167357d3753a299ab7cd41b4dbd50ada950193ec82c0c265d3ec8b3c31830d65a27a7d88af44b76
SSDEEP
3072:ZxpdVdlHP4BXTL19NXVoV5gXQs9A39CNoAzZir:bp/dlv0X5pS39CF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
36cdd4da6a61393d8532fe6ea877bd47 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE