DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
c064d4633974990cf08f8ebb094283bb.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c064d4633974990cf08f8ebb094283bb.dll
Resource
win10v2004-20240226-en
Target
c064d4633974990cf08f8ebb094283bb
Size
44KB
MD5
c064d4633974990cf08f8ebb094283bb
SHA1
c601793408bd04a49b1d1e2722cc07c7d742c24b
SHA256
b3833d1f90dcd6449a53b717560e94adef8cb30b02fadae0df4e4448963d92e1
SHA512
879dd997bd74d272f4d694992ee0cacceae426ffab19cc2b1f2e953255fc3b71c027dd9cb68eaf35982ed6cf7d42dd90dd5be004e35a46cc59b28f2c2b5439e3
SSDEEP
768:1xzG/a7hMP3ilmbQbR/CXMSLWgc24BvfSsHU5CH8rv0W6E9APeWQ2k4:15G/aVMKQbQd/MPWgJ4hqSl8r0Wjapk4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c064d4633974990cf08f8ebb094283bb |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ