LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Behavioral task
behavioral1
Sample
c6172b8a4f58ec5f2fc9704655fe6684.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c6172b8a4f58ec5f2fc9704655fe6684.dll
Resource
win10v2004-20240226-en
Target
c6172b8a4f58ec5f2fc9704655fe6684
Size
30KB
MD5
c6172b8a4f58ec5f2fc9704655fe6684
SHA1
5dac4554b403566e8f6e90508caa938fe44de1b2
SHA256
a46351a3dd8a002a034792781330b5828848bb1e2bccddaddbd120cd78a5d549
SHA512
1111a3c92aa5395db7426498d6d38fbd227a9435107b8545bb2dde778da9d82683abf0437f543e543c887b3a6bb4306b7634a2cc326bef6d83a0925905018373
SSDEEP
768:kCXtoFbjIhhKl/v8n5Ydfv7Q3c9snbcuyD7UF:kCXtWu8lsGdacinouy8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c6172b8a4f58ec5f2fc9704655fe6684 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE