DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
9ba642551c529b6600c8e99dea1cd2bf.dll
Resource
win7-20231215-en
Target
9ba642551c529b6600c8e99dea1cd2bf
Size
7KB
MD5
9ba642551c529b6600c8e99dea1cd2bf
SHA1
6874135e8f0b77816c06457130f8bdd56cd28a76
SHA256
6c98d20dfb32600706f5243fb694cb2776b5e0892f359751df80045aa4160989
SHA512
afc2104bbb31d9d0f0ebae49f11fb5ea03479cf7de791b6976cb1aeb55e7de8e757eaa7072ca615dca5f15a2e2f857259b0d5f180caae2a5a0baf4013a47b64c
SSDEEP
96:VJBfjMI6ivZaEzijW8v6+55REdIVdd/woX7tlVrmcpQlbxzeHlmlB8TphMf0C:VJp16ivrk/55REdIrlw8tltAzITj/C
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9ba642551c529b6600c8e99dea1cd2bf |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ