DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bc55e176a5494138a65961670d372620.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc55e176a5494138a65961670d372620.dll
Resource
win10v2004-20240226-en
Target
bc55e176a5494138a65961670d372620
Size
25KB
MD5
bc55e176a5494138a65961670d372620
SHA1
1ef9396cecc000f0580c229c31d20c100d1255f1
SHA256
f3553812aa5ac6bdda2382ccdf4c44636a03bd933514071094d964c4b6de8135
SHA512
a840c8ba85283f8bfd7c41e4e4d0098043169c3002d627b75780df1198b61214cc61ce4367b8adcff5ce60c349b9e05a37fc0a91a105a97990aab92b8b202ca9
SSDEEP
768:gAiX2k27nbcuyD7UC6LmrQ6rvT4pOzIiPLdh:S527nouy8C6LaQKTMO8iP3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc55e176a5494138a65961670d372620 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE