DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
866c0963dc937096114f3d2f13ab4dc2156348299f091f483ac9f489f9913c59.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
866c0963dc937096114f3d2f13ab4dc2156348299f091f483ac9f489f9913c59.dll
Resource
win10v2004-20230703-en
Target
866c0963dc937096114f3d2f13ab4dc2156348299f091f483ac9f489f9913c59
Size
275KB
MD5
091715e3e7b0d1c838ea9479ee0c4022
SHA1
cd0581182d948ff64f8d78d9b3d17d917c355130
SHA256
866c0963dc937096114f3d2f13ab4dc2156348299f091f483ac9f489f9913c59
SHA512
f4dc698b2dd9045790d39cc6c615fc54b00c0b2ce2a9a33f6961806d0098864c20b54f721a756497b72c45c125dd806c6ff39f78ddb01dfd9a09aeac4b9d1a5d
SSDEEP
6144:7WxdOILCxtLzKcvH326UW/klMiUOE8CxlMRaffQ:7Wz7LALmwXv1klKOE8CxRff
Checks for missing Authenticode signature.
resource |
---|
866c0963dc937096114f3d2f13ab4dc2156348299f091f483ac9f489f9913c59 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
__vbaVarSub
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE