DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
3ccd9206d0c4eddee2f409bd3733e7ff.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ccd9206d0c4eddee2f409bd3733e7ff.dll
Resource
win10v2004-20231215-en
Target
3ccd9206d0c4eddee2f409bd3733e7ff
Size
248KB
MD5
3ccd9206d0c4eddee2f409bd3733e7ff
SHA1
36726dda5cc1d046692feecccf7fc00d8ea1c93d
SHA256
d0d0b026cdfe99d9589f6cf3223731e9420a4bab6d5e0e7ead4ccf93cdf2045c
SHA512
9543728f283634c131296d4b48c8cc07ca09f38f7ef9fd849344b87e065324f8a53ef453ecf2a54bd1b1243c1b6eff9891c93f68a49358e9917a567b133d313d
SSDEEP
3072:bHbeL0i42nSpuD/heke1AKy7e4GtbA6gh4i1ABEzFmFJyEyU10JjvUlInZjhCJ9K:TOQ2LD/69Rr44kABEQhytjBZlKIM1Y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
3ccd9206d0c4eddee2f409bd3733e7ff |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE