DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
8053e627b2c8af21568b662fdce6cfa0.dll
Resource
win7-20231215-en
Target
8053e627b2c8af21568b662fdce6cfa0
Size
10KB
MD5
8053e627b2c8af21568b662fdce6cfa0
SHA1
758df4880edd8e0a7834decf5c28a9f4fa718be2
SHA256
36d4f9975a5828387543bd901e3cfa511c7c46f59c63d6970519f744a0e351bf
SHA512
1d50a36da5cabb8c041271cf5393d726d700762c9dae7b8db9dd1ec7af3ff542c3d15747f7a269f0cb23b3505a4d8130f1f08d6d7621ff9f37cebe9c0b0e8ce6
SSDEEP
192:cvjKrgQl9SO6Vs7ehc5ImkRKMMwFaNJhLkwcud2DH9VwGfctQ/5:cSgQzSVo+cPQKTEaNJawcudoD7UW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8053e627b2c8af21568b662fdce6cfa0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE