DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
da9b3656e2691c5f6ecf2bf26ad9b5a3eee394d9dffa0b4cd71f0acae300e4b1N.dll
Resource
win7-20240903-en
Target
da9b3656e2691c5f6ecf2bf26ad9b5a3eee394d9dffa0b4cd71f0acae300e4b1N
Size
234KB
MD5
e1937e76d554234082c02ea3de77ed80
SHA1
19f4f1f0f511c35c66d240419c3b105216b54408
SHA256
da9b3656e2691c5f6ecf2bf26ad9b5a3eee394d9dffa0b4cd71f0acae300e4b1
SHA512
0f6223de175db30cbd80a3e387a815e6a76038b0300e82ba6bb8695c6e6591756f366924c0ecd518fddc7a8cd5476bc3940b6a01cb30665a3216da9e4fccb121
SSDEEP
6144:RqWGMxiZ9N1rsF6pQmhnktrCTQM2WQIqwhjbED6dH5ETdRnGhB6RGg6N6:pGMSxr46emxktxZInjLQSqRGg6N6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
da9b3656e2691c5f6ecf2bf26ad9b5a3eee394d9dffa0b4cd71f0acae300e4b1N |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE