DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
9b2a4176981b1ad43e680b846d41c096.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9b2a4176981b1ad43e680b846d41c096.dll
Resource
win10v2004-20231215-en
Target
9b2a4176981b1ad43e680b846d41c096
Size
185KB
MD5
9b2a4176981b1ad43e680b846d41c096
SHA1
e0e97ded33af4cd4d88abda2c57fec68c0a11aef
SHA256
c1b5a3381795ca4410ffb983377e504a23fb0661ca5b5d63279c73701e17759b
SHA512
f92d58396c20bc117b47c8c051a9aca19cc4d6f4692e660b6d35bfe1a36739760bc21b2dd5bbd21d96505b5bcf53e634965f89550bf1b87d30a78330fed2d8b9
SSDEEP
3072:uWpyzGMGlDbLE4AnLI2JNRCaPxMNJvV6ZU+VC4qLk5g+0EtZLc940EUbcNtIiXKV:uWhHLE4AM2JNRCBNfCfrq0019JjbcNt+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9b2a4176981b1ad43e680b846d41c096 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE