DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
63b11f15ca5c0ff1330e94aa6ef9d8b4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
63b11f15ca5c0ff1330e94aa6ef9d8b4.dll
Resource
win10v2004-20231222-en
Target
63b11f15ca5c0ff1330e94aa6ef9d8b4
Size
575KB
MD5
63b11f15ca5c0ff1330e94aa6ef9d8b4
SHA1
b38093b426e8915625acdd0996c618ce01407e5f
SHA256
db2d40156bc265f02757a43d5af663002784ebb589acb7bf468746310e197fb2
SHA512
5470214239b328581ca6befdf4cd9ee185b68b0e30b03c049b09c5d24892c54d6e2dce4f1374a40af92ee86f5821dfe28a97e1726356c9593142aff9874e699d
SSDEEP
12288:Oa997c4YwoJhD47nQCwblIc7Dsv9CUPUrSz31uDXybT:tYw4aMC0IcPxUPUr431SXs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
63b11f15ca5c0ff1330e94aa6ef9d8b4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
MessageBoxA
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE