DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
4e62152e78c1f22501676fd91fc28ad0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4e62152e78c1f22501676fd91fc28ad0.dll
Resource
win10v2004-20231215-en
Target
4e62152e78c1f22501676fd91fc28ad0
Size
78KB
MD5
4e62152e78c1f22501676fd91fc28ad0
SHA1
40d07fd553f339ef6360bd7eae41f02dd90bc344
SHA256
6c623197e84471cb1947c8a3740b86d2fa6e152631fcfc1e29a5d9a425bdfaa1
SHA512
0c2c89be0c9cd77127076bec411840d79415c234992bb14cd96b734d5e30e27633185497995627fcd1bcec0547b56f0143420e167aebe4d7d0986c63e769770a
SSDEEP
1536:L3ewGHcXlKTzZ8yoLl57lvrFBRbk1FMtnFQInouy8dR1rn:jfXlKTzZwtTRg12fQgoutdR17
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4e62152e78c1f22501676fd91fc28ad0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE