DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
0fe35ea1912999eb6538649244a27981ad8508f370a8b488e9930a60d500660b.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0fe35ea1912999eb6538649244a27981ad8508f370a8b488e9930a60d500660b.dll
Resource
win10v2004-20230703-en
Target
0fe35ea1912999eb6538649244a27981ad8508f370a8b488e9930a60d500660b
Size
349KB
MD5
67381bc529699e8c4e31fa0a2c8eb45f
SHA1
fa87aa61f23b7b8a5f8ca33a1a65ad01352e3c82
SHA256
0fe35ea1912999eb6538649244a27981ad8508f370a8b488e9930a60d500660b
SHA512
a3977c200fa52bcce35189b322e9a41c733416122c70f26c035d3a613890ac8449525182296a881959a8cc243abceab0a2f7c0a4e932ee53cc19edbc85894b05
SSDEEP
6144:ZVs1rS0R9nTgjtOdcs0Lup6dCDYhrZOi29vnJIiRVJovkZs3emh:ZV05R9ncjmwdwAEiGnqiRVJoAs7
Checks for missing Authenticode signature.
resource |
---|
0fe35ea1912999eb6538649244a27981ad8508f370a8b488e9930a60d500660b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
__vbaVarSub
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE