DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
4361b42d84e76379547879dd408dd729.dll
Resource
win7-20231215-en
Target
4361b42d84e76379547879dd408dd729
Size
10KB
MD5
4361b42d84e76379547879dd408dd729
SHA1
f1ad39afdf7ba5b0f4e1c030e4f66fccecfefe2d
SHA256
59e7d262a12b69744372174d7d1e2ae64540def3a42b6d0e4ac830eebc8ffe67
SHA512
b8b51731d05c5aa75ca9bd03a0a4e7d519c9d84b4bcd57558a68239d87aea6c1c70ddc330549d460e5b6c228a62864e92d9c404c410e1a9cff760fff5d4c54ee
SSDEEP
192:tA5FIB/z1xOA1WIdcN9Iy89yu2CbdfmJeFVy2FaNJhLkwcud2DH9VwGfctg8H:KG91pcN9R8Mu59mJetaNJawcudoD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4361b42d84e76379547879dd408dd729 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE