DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bb09f570667349e39285f4a630aa2274.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
bb09f570667349e39285f4a630aa2274.dll
Resource
win10v2004-20240226-en
Target
bb09f570667349e39285f4a630aa2274
Size
45KB
MD5
bb09f570667349e39285f4a630aa2274
SHA1
6c38f9ebdd7a932e1b6c6c623ee13475908136d5
SHA256
7bfb1fe41ce61d211f7fef8033a402a7faf32a81c425db58056c6d4c0b1315b3
SHA512
84b0fc6dbba2ead01246ac2a097b520a8a6d9f77510b6755260bd6ae9d3da172249b3cbfcbb9d5e0ddc15c3982c059a3e78ab7cf6179949021e4eb6eb478aa4d
SSDEEP
768:eXmmX/A9/9WtgpLtMhTniUKCrZbwIn/H2UKTi2fxqOCNOm+qQr/wsDGQ:ivwGghtsbiUZrtwimG2wNp+qQr/wsaQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb09f570667349e39285f4a630aa2274 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ