DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
6829cb282ab043344a0e152a9920d616.dll
Resource
win7-20231129-en
Target
6829cb282ab043344a0e152a9920d616
Size
10KB
MD5
6829cb282ab043344a0e152a9920d616
SHA1
b312fe212a2717836af47df82602b0059da9d407
SHA256
9d665a17c9b6bc6e7b80770f880fe23cc520f65c21315bf431b2440d71280008
SHA512
cc1b0ac1d01aeb2c683a308e7923fc8798571459473c5ebe1f5e4d177cd605220fc6d769e8ab627002a806289eb667a8200262c3dab047a99bb23997b62edb92
SSDEEP
192:cSybcBu9cl2cz272kEV6OsPDNViZEFaNJhLkwcud2DH9VwGfctQ/7:cS+wRl2c2LEV6Oc5VEQaNJawcudoD7UW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6829cb282ab043344a0e152a9920d616 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE