DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bf97feb44182d1f5809ba44af06f85cb.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf97feb44182d1f5809ba44af06f85cb.dll
Resource
win10v2004-20240226-en
Target
bf97feb44182d1f5809ba44af06f85cb
Size
46KB
MD5
bf97feb44182d1f5809ba44af06f85cb
SHA1
3a79888e15852c6ddfa2f11fa98b53f391cfc502
SHA256
bb90774ec6118e3e4fb2e37806599f51cb8b1c0f525e11794dec91f4c5b76927
SHA512
bf5f20ee82d1d89ca4479648d893ce63f65f5b3493cc67788d4ce82e607d04cb387d57196d4bc2ce68db61049c165337ba702ce496ba02e91f3f976090d37968
SSDEEP
768:NLAUZ//5zSV0RbxB2kU3TW6dlW411HdwDNwmoO2avofHwGqlelphFWjE6x78wHry:5f52V0VU3Tdlf965wG2avUQhlel9WjEB
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf97feb44182d1f5809ba44af06f85cb |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ