DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_msize
Static task
static1
Behavioral task
behavioral1
Sample
5247869f221bfc57d2f1c8af0783f9bb.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5247869f221bfc57d2f1c8af0783f9bb.dll
Resource
win10v2004-20231215-en
Target
5247869f221bfc57d2f1c8af0783f9bb
Size
33KB
MD5
5247869f221bfc57d2f1c8af0783f9bb
SHA1
32f77d589ddc2863de4fc8e55d9222e1715d839a
SHA256
f154270b90f7b46f4c05fa21de0b87149f40ea31d1e9e3c18ff395a296d16fc9
SHA512
5364f4f23c372bdd8da844b4a9c2c585589ac19eaf8b597e0071eaa144ba25587b50d7392c5daf4e95546be2ce69d1fc6a0efae4f942043689953d8e2de3b7cc
SSDEEP
768:uqOxOTUImTbWSSnrt7q6uIm5EyEuzQtzY6GeYvKO3ue:uqzETbJSn46uI3up6GeYSOee
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
5247869f221bfc57d2f1c8af0783f9bb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_msize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE