DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
593a16587e1c03995f5fdac1e7ab4f0f.dll
Resource
win7-20231215-en
Target
593a16587e1c03995f5fdac1e7ab4f0f
Size
9KB
MD5
593a16587e1c03995f5fdac1e7ab4f0f
SHA1
2d78ff29c15676976c27242bb045d7801445fcdc
SHA256
17a7f99d26f5aebd993d5870070a86ac94115a2d5837633880a8ebe4060d52b9
SHA512
ed63e6351d1c9d2edd65ea92e88b9c427d686f41d5baba8062178ca457dafe0a4137a7c9a8945e531ebc24404ac88051e5de91a8293fc0cfd205ffba9a62833c
SSDEEP
192:S+EQviyYh2v8HVXixXXITFaNJhLkwcud2DH9VwGfctjzX:StQaN0XI5aNJawcudoD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
593a16587e1c03995f5fdac1e7ab4f0f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE