DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
96bd16740b67dec2271ca07309ba2915.dll
Resource
win7-20231215-en
Target
96bd16740b67dec2271ca07309ba2915
Size
8KB
MD5
96bd16740b67dec2271ca07309ba2915
SHA1
078987698b7c5e41a112b29243119b476dee113c
SHA256
88cd409da0f06478ae882a1486f1b87bb26b83ed9b8f1e9546626f383ae65557
SHA512
2eecb839bf5e0858109621f39b9376de50cb280951c40ab7fcd3ecafa35915d7d29af7db2d3b25e134080f12af0fa4fe12a5ab994b99c9aac9bb55af890931aa
SSDEEP
192:K4/BIpdctSKZ/m3xOAPForwpqhDe6IQUV:XJIESJBrPFoUq9IQU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
96bd16740b67dec2271ca07309ba2915 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE