DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
85fcbd38cc5f73f8f803ac808918ed4f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
85fcbd38cc5f73f8f803ac808918ed4f.dll
Resource
win10v2004-20231215-en
Target
85fcbd38cc5f73f8f803ac808918ed4f
Size
145KB
MD5
85fcbd38cc5f73f8f803ac808918ed4f
SHA1
20fe94253c850a4576221e85dd1ab38840429908
SHA256
db7c39e7693a048f4f26f611cadd853b04a70b2c7f4aae07ae6f9f64b559150d
SHA512
1999e23fd425c12968f9fda39c19aea3a7ca6937347f50f1b9ef211177e92730e266ec41d63f440ea99d42a91454e0cf213497383ee9addc3fa0546713a06735
SSDEEP
3072:eIGWn/SkCfjqkdLp9zmKx3MHx0xN2outzXJquaZKDa8Cy/p:DGF+kdVR8Ri2oSzXJq/Iagp
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85fcbd38cc5f73f8f803ac808918ed4f |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE