DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
c7bec1e6967af8bbf7e0f7b9cf0a987b6875d2549dc0ef5ada522829d3e845ab.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c7bec1e6967af8bbf7e0f7b9cf0a987b6875d2549dc0ef5ada522829d3e845ab.dll
Resource
win10v2004-20240611-en
Target
c7bec1e6967af8bbf7e0f7b9cf0a987b6875d2549dc0ef5ada522829d3e845ab
Size
56KB
MD5
681931d925d3055194c8f5cef383bc6c
SHA1
373cfa4252d3696f5e930b40e44a6c648f32138b
SHA256
c7bec1e6967af8bbf7e0f7b9cf0a987b6875d2549dc0ef5ada522829d3e845ab
SHA512
44dc12e62d463e5ccd86a54e0601c7f808d313dd907d249009e312dda3c0ebb1eb526dde49ec20ac15a29bb1c24eb879e218546e2096175b35da567b59385b64
SSDEEP
1536:D/yuhoO9Ta63lZts6x7KicU5sNBxzrnouy8jIqE:D/yuL7jcU5ydzout0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c7bec1e6967af8bbf7e0f7b9cf0a987b6875d2549dc0ef5ada522829d3e845ab |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE