DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ab2fcda9e2323b2ec91e64464e3bfdaf.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab2fcda9e2323b2ec91e64464e3bfdaf.dll
Resource
win10v2004-20240226-en
Target
ab2fcda9e2323b2ec91e64464e3bfdaf
Size
58KB
MD5
ab2fcda9e2323b2ec91e64464e3bfdaf
SHA1
9f7892cedce218b475434ad5d3da9227d8ef2d1d
SHA256
07b89f1b47dc7125e3acca4d0ee19be91a4a31ef91925e818333f5f4b689a5f8
SHA512
5b74e4a8a44079a8bd2e1e1090b38bf2f6c935e90569483e398a57863c50491f317d8a9e503ce606db5c8dca81c15836a7c6a5bb10ccb47177d0af16ebc47012
SSDEEP
1536:8yG/HFt/cEaR2pkAkKcJrS8Ywm738ozaJaQNqrmo9xC:8VHDpzkF5rS0AMKNQkrmKx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ab2fcda9e2323b2ec91e64464e3bfdaf |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ