DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bf3781780b1b9e30218af33518ca3a2b.dll
Resource
win7-20240215-en
Target
bf3781780b1b9e30218af33518ca3a2b
Size
224KB
MD5
bf3781780b1b9e30218af33518ca3a2b
SHA1
7b83718c2f18c6d9d7019c4ba426764ea8778a70
SHA256
dd84189def356f404b01c3bcaadb0d18b975badf48b00405d0aed21e005fa639
SHA512
2a4f0e6314d535d8d515fff83aabea1c67b432796e3af15057ff5487451ca51b8d3edb7c16f157c9abf29ba4a6873e84ddc1d0547fe137624367d67070bf347c
SSDEEP
6144:hwx/C2G6SDG6dphYB365sryrXlsnwXAIvW:hwHG6SD/ac5sruXeAAIv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf3781780b1b9e30218af33518ca3a2b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE