CBFunA
CBFunB
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
56fb26472917feb8881fcc360c563e20N.dll
Resource
win7-20240704-en
Target
56fb26472917feb8881fcc360c563e20N.exe
Size
722KB
MD5
56fb26472917feb8881fcc360c563e20
SHA1
adf923cac3da5a650ff1da87b82a2540fe98a3f7
SHA256
8da5503e63e0b60053649435970de2d57577b1fe550a6b61c71ee616d908c745
SHA512
0b37486a31740402893f6300772d99d4b5ca6a8bc0e711141d120f328a7a44095b3d864b9b71ab24b28d3a8f0f69bb5f29e6f9072d6b1b9bb72b4d7c27e7205c
SSDEEP
12288:wOOXMttuW5ccGHVGZ989ZRvuNS0BPmz9qxoS29JxQ9YSZeQGUfwVt1/ghpFinG:wOOXMttX5cceG/qoI4m8q9c9HXGUfwVz
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
56fb26472917feb8881fcc360c563e20N.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CBFunA
CBFunB
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE