DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
Static task
static1
Behavioral task
behavioral1
Sample
ab23d8fb5c90b88cfd20917497a332bc.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ab23d8fb5c90b88cfd20917497a332bc.dll
Resource
win10v2004-20240226-en
Target
ab23d8fb5c90b88cfd20917497a332bc
Size
77KB
MD5
ab23d8fb5c90b88cfd20917497a332bc
SHA1
1e3cc50a96f35b6e59d0d2dc038796b8cfd1da9c
SHA256
ab7e6787f670601114c363feab39ba4f2c026587cc6767bcef66bd0102fa223c
SHA512
5dd6951b03b4cd357792297b6115b164daab4f0095b776935d2620dc913bc7bc7438bf3eea8f9fa22f197cb7bac2374509231601e976c43ff90e9f621ad748ab
SSDEEP
1536:rL+BQ4WUrxxIzR6WhTYZr/mpJ+/xuD7TzOlEZa8zE7d/sPDn5ArtWT5ud:HqQarxxSTKr/mpOYnT6iI8UgFOtC5M
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
ab23d8fb5c90b88cfd20917497a332bc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JumpHookOff
JumpHookOn
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE