DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
8b079fe5523309dc34f5bd6b070e376e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8b079fe5523309dc34f5bd6b070e376e.dll
Resource
win10v2004-20231215-en
Target
8b079fe5523309dc34f5bd6b070e376e
Size
42KB
MD5
8b079fe5523309dc34f5bd6b070e376e
SHA1
dd10c1f56beee7bc3aceb8f3afb325d427344648
SHA256
a9108f2136956fd0f6936979798c01867dd7fea19fb7018667382a6ef92e7dbc
SHA512
71bfa0d0d5bbf1cd7e59cf2ebce1ce8a8cded5e7fba97d15af79323f921544b3c2a4020f94a4340257b3d72e7e26e5424b6c3e49e5ebe84796e72b1f58a6f237
SSDEEP
768:n6uafEScks3Q4awYjDj/ErcW3VSC5balp3dYvDgOztnTapI9c:njbawWDkhIibabNdQtToI9c
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b079fe5523309dc34f5bd6b070e376e |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ