DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Uninstall
Behavioral task
behavioral1
Sample
cbbb680d084cb718f57dd324d21a2ce6.dll
Resource
win7-20240221-en
Target
cbbb680d084cb718f57dd324d21a2ce6
Size
50KB
MD5
cbbb680d084cb718f57dd324d21a2ce6
SHA1
12bd783b3d5457a6b24e73512884408c77ea68e8
SHA256
71a153faff57838ec7c117efd7141ce2c7cac95269152f740de4b4d3b8448194
SHA512
8820a064796b4d579939c7c0a686945b10908705dbea1875c6af08ae529152f9b357a105c99ec85f1da55172dcfde1e719bce2310d510f3037445e37e7b0108c
SSDEEP
1536:qf0IsAtJoH269gqW1GqFF19vvB0DWeW3:w0PAt64qWGqTvvBv33
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cbbb680d084cb718f57dd324d21a2ce6 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ