DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
4f2796061d066a082cfcb361ca93bc5b.dll
Resource
win7-20231215-en
Target
4f2796061d066a082cfcb361ca93bc5b
Size
95KB
MD5
4f2796061d066a082cfcb361ca93bc5b
SHA1
672dba832a2337e48be1a5a3935885b8a841a691
SHA256
a21cad66597da4eb9e722ee001716708d4a7a552e8682365c13d8fa8da29aec8
SHA512
4ffe9775d504dd1acf3bb180400149930db57a0eb9b61ca580e873cee35df9b0e906abf29e1c11875e9f5848dca7b0f744136d582d7d4eadf94cffa87e999273
SSDEEP
1536:iBbtR7xw5wRrbuGNx2kwjLhZWHbs5yI/as+MdgsVDFFPR574zLPk9dafCopNsYgi:gIYbjNx2kq1lyIhlFF/24daVMB0K1uoG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4f2796061d066a082cfcb361ca93bc5b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE