DllCanUnloadNow
DllGetClassObject
Aibknco
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Behavioral task
behavioral1
Sample
d780b0fe7b5405e3d83f2421231da7d0N.dll
Resource
win7-20240903-en
Target
d780b0fe7b5405e3d83f2421231da7d0N
Size
70KB
MD5
d780b0fe7b5405e3d83f2421231da7d0
SHA1
42e924dd5cd7fc2904010e9b4239c0351a4b8638
SHA256
5a2b46192ba60590cf7c691356ef06ec91e9b0a6650e86605f43336d14afc6e4
SHA512
a0d04e4808a527c12471a93e1957917cf80e97dcac519fe6396dcc2209f157123eb2fc0a7b76a0f97b6f283dc0ead2b22002b81c03bfabc7b2d367aefa3c1196
SSDEEP
1536:lXLwtq0c49MKioFjSz1UFLE/dW5MMbKl89h9LMTlp/8zWqlLqw7t1FVSr77GnouE:lXLwt/FiaU1Uq/dWFbNr8azD7VS372oX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d780b0fe7b5405e3d83f2421231da7d0N |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
Aibknco
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE