DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
ccfdcaee6949c5d6162557dc90e7a0ac.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ccfdcaee6949c5d6162557dc90e7a0ac.dll
Resource
win10v2004-20240226-en
Target
ccfdcaee6949c5d6162557dc90e7a0ac
Size
233KB
MD5
ccfdcaee6949c5d6162557dc90e7a0ac
SHA1
d51c11e4e37f2f31837bb5e16bd71eaf45344634
SHA256
2ebffea952c81d1ee23669ce299a6d15f696bec574cc9cbda22c8230f0eabb3b
SHA512
3f8ca77405366fb827f1fa2dbe68c13649a0f4465d122e4fec7aaaac40e281f5fb4b03b25d59e5a2e140c40da639a5062c872fb1e25afc208b74c1b15d2c313c
SSDEEP
3072:NpvY4tnWIHlkj796HM0XU+aDe5UEjmIlmijI7rUGimMTNliMlOzuKIXF18RpzPPo:PvYNbn+aC1meyUGimMTzPKpzXP8yq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ccfdcaee6949c5d6162557dc90e7a0ac |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE