DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
96655174e399514d5bcc1ca7b70d48cd.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
96655174e399514d5bcc1ca7b70d48cd.dll
Resource
win10v2004-20231215-en
Target
96655174e399514d5bcc1ca7b70d48cd
Size
45KB
MD5
96655174e399514d5bcc1ca7b70d48cd
SHA1
b7dd415b3488d23b3aa519ca511a7a6ec663059b
SHA256
8d50c3e729720f5692c39d84a2e1f310536e528bfd52fe2bbd02efb6e8692e8c
SHA512
234e7c53dee088ace194014ce34754ab2c50730a9d057d7ec639878d21712c6bd7cd7b17917223aee709f8707ecae09986f26040d35f32a01df133ee7912fefe
SSDEEP
768:d2DRe1vE4zwAW221H/9NCDDFOdSzxIgp+XHBOcU4tlXQ96oo7CVpktLk:dvm4z72h/9NCH4Uxo3LUn9M7sktY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
96655174e399514d5bcc1ca7b70d48cd |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ