DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ca95a15d1e3cb4d36739c3b88abe226a.dll
Resource
win7-20240221-en
Target
ca95a15d1e3cb4d36739c3b88abe226a
Size
78KB
MD5
ca95a15d1e3cb4d36739c3b88abe226a
SHA1
007242e3c128b9f15d8da0057aba6f209f6bfefa
SHA256
4455a1a71da0e6d3ef2115aa4361e8bd62d41d65e952e848340051ccb75bb5a5
SHA512
cb8cf730c68ab25b3019f368e345cef3b752dc7af7ed57319efd1cb024ae3b5475ed1757a1ad057e55de687e92bb33cac3fda45170e36990695cdb625f23c1c4
SSDEEP
1536:I9cUmk1/HuSRUWfPXeAYfPpAClwtMnPND/vjXJBWZ6OTdj8leOys:INme/HuSRdeAUH+WnPND/LXWZLd8cO1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ca95a15d1e3cb4d36739c3b88abe226a |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ