DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
41f6cbfcb0769126f7b2f230b9dc1416.dll
Resource
win7-20231215-en
Target
41f6cbfcb0769126f7b2f230b9dc1416
Size
52KB
MD5
41f6cbfcb0769126f7b2f230b9dc1416
SHA1
0d83c777cdbbb5bb02c56f4c3ca69634a063e60c
SHA256
77dc6b08d30e632f5a1c04a8a2fedf4dc82810c3f9baff3f1ef4ebd08225a1ec
SHA512
b6a0187fb2623dda9b88be2c68d8c829af7b5df999bd94ed0d2c8897d89867d2cdb0e8457a514f5926e398fcee77d33cc37a6d5832f8bbe33d5cda57c1c28ca3
SSDEEP
768:gnCIdH45oA0PnE6KPP2kUWZZN+wK3bZWjr9nID9RDYP54kNJa6KPQBia++RTw:gnCIK5oAuKP80NyEjxIhGP5+6q+Ds
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41f6cbfcb0769126f7b2f230b9dc1416 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE