DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
5281df5dde4358c420383292d070b132.dll
Resource
win7-20231215-en
Target
5281df5dde4358c420383292d070b132
Size
9KB
MD5
5281df5dde4358c420383292d070b132
SHA1
fd600f849f54c14a8823ddc85b7e4da666b77e5c
SHA256
3582f9363137a518ad6afe06fc83384e7736a038a72d0406c79fe03309303875
SHA512
66f12f64f0d6e514b5efed544ee071dff5530ad76bc5fceeb157e035cde646cf6b6cf6b0e3cc4976c24a87062f5e33f0d7f58a295926f5c8d351a5d2fdc594ce
SSDEEP
192:8UzswJpQwtiVfBhrCHKF5eiaPCKrVdp61iX/VG8FaNJhLkwcud2DH9VwGfctjLX:RbJpQwotXGHG5n8iiXNbaNJawcudoD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5281df5dde4358c420383292d070b132 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE