DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Behavioral task
behavioral1
Sample
d77fb7a08a2e04771940b1cfdd6b74c1.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d77fb7a08a2e04771940b1cfdd6b74c1.dll
Resource
win10v2004-20240226-en
Target
d77fb7a08a2e04771940b1cfdd6b74c1
Size
50KB
MD5
d77fb7a08a2e04771940b1cfdd6b74c1
SHA1
0a54c932470cefcb07ae25042b99232476d3dc4f
SHA256
ec45efb5584d58d3e10880a73e2b5bca7771e88653f91d8969bd2a0327291de4
SHA512
991c97bcf9019db5de75b45992524c4b8c195f676c09b7c135ac77defbcffe4ce1ad6d759565d2096618a2d5379bf4c9d1eb032deaf2a4ada6ed7015e5b465fd
SSDEEP
768:iE0ITDFG0dCpATAZiTTS+xXvqgyKdhEWCgREUjZ+LKpJKYNG+0fyzFnCPlHc1:iu9YQ5ScygySvzZ+epJKYUO4dc1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d77fb7a08a2e04771940b1cfdd6b74c1 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ