DllCanUnloadNow
DllGetClassObject
Kmknkmk
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
409ecfd975abd4f9b96efe5b2ebd7f26.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
409ecfd975abd4f9b96efe5b2ebd7f26.dll
Resource
win10v2004-20231222-en
Target
409ecfd975abd4f9b96efe5b2ebd7f26
Size
70KB
MD5
409ecfd975abd4f9b96efe5b2ebd7f26
SHA1
06af640658fd09ab03151a08b2e844b6349fb1c3
SHA256
4a0841ee548f26f8f04f9e65b24fe7d490bdf28501063466bb52eac17c9aac9f
SHA512
c20e50d9cdf51d148e780cf16142c89d5d60a44b20d1c4e7c6677bfc60fae0c68ba217032470098aaf84bfd430d2139beef3b0fc9e56ff05f02a50023410e322
SSDEEP
1536:uXLwtq0c49MKioFjSz1UFLE/dW5MMbKl89h9LMTlp/8zWqlLqw7t1FVSr77Gnou8:uXLwt/FiaU1Uq/dWFbNr8azD7VS372oX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
409ecfd975abd4f9b96efe5b2ebd7f26 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Kmknkmk
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE