DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_f
_i
_key
Behavioral task
behavioral1
Sample
0309b38fbfd0915dd49dc99e8d7797ed8ee48b7666d50869f5e42304f3b744c6.dll
Resource
win7-20240221-en
Target
0309b38fbfd0915dd49dc99e8d7797ed8ee48b7666d50869f5e42304f3b744c6
Size
91KB
MD5
ef1619441b8ec3e742c614dcd94d0f5b
SHA1
2233f16ce81e5bf69794fb032b48b8e81f1833ad
SHA256
0309b38fbfd0915dd49dc99e8d7797ed8ee48b7666d50869f5e42304f3b744c6
SHA512
1cf2e6faa78be37def5bcd3c0595abecc144bca93bf2930a46cf0b91f589a57c6a5cecd5324808a4367f9fcefb84e1a715b8d475fd6aad9b0705bad541bb1a34
SSDEEP
1536:UWwkvgQPwdQIPAgruZtI6Cz9QfS4W2S7hTD3RtNfTALPwldhNyjHidbw4BYFfa:UW5vwOsWIpQfS4+NH3ZEEldhNfdbw4qC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0309b38fbfd0915dd49dc99e8d7797ed8ee48b7666d50869f5e42304f3b744c6 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_f
_i
_key
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE