DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunAtl
Behavioral task
behavioral1
Sample
bf2c6a787b47a2a2526e0578cf4c48df.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf2c6a787b47a2a2526e0578cf4c48df.dll
Resource
win10v2004-20231215-en
Target
bf2c6a787b47a2a2526e0578cf4c48df
Size
13KB
MD5
bf2c6a787b47a2a2526e0578cf4c48df
SHA1
1d5ed1d44dca5cf2a5f7283edba50b874e4d7acf
SHA256
89772da2b4d31b631f1724ec893a829529e84316dee6c5312a095a8d4762efab
SHA512
78c9beef844a7e6f7ee824727e995e07ddecfd51c36d0b2606e6bf1fe5674cdc766e0fa8d5786c70197f9c46b5028990fe926049c0e3d8276d4700495b1b6234
SSDEEP
192:OTx16bGin8HGBr5l+B5zxXa1EeF9OxoZkmQqvAHAeWfyS4:OTCqrGr5wB5zZGHUgkmQZWfW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf2c6a787b47a2a2526e0578cf4c48df |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RunAtl
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ