DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
496d5931d3425293b8fe9af30883f5bf17ad7fde1d147e8a56ede56e04da03ff.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
496d5931d3425293b8fe9af30883f5bf17ad7fde1d147e8a56ede56e04da03ff.dll
Resource
win10v2004-20230703-en
Target
496d5931d3425293b8fe9af30883f5bf17ad7fde1d147e8a56ede56e04da03ff
Size
76KB
MD5
24eaa9f5b5b3b669c071cd44efbd425e
SHA1
969477308fad7c97b587257fda5e8a420fc6a6b3
SHA256
496d5931d3425293b8fe9af30883f5bf17ad7fde1d147e8a56ede56e04da03ff
SHA512
28b3231a263a5825eab0206adcf624ce5a0f5908093aeeb6091bb61244c84c046320f2d9998500f0a7da27a1bd0556350c4136314c43bbc7d8c22559844ae702
SSDEEP
1536:PGeWnIxiyxipDjIXdw74v5Fk1Rdkm4UqiD:OnnIxiyxixk5Ji
Checks for missing Authenticode signature.
resource |
---|
496d5931d3425293b8fe9af30883f5bf17ad7fde1d147e8a56ede56e04da03ff |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord690
MethCallEngine
ord516
ord518
ord300
ord594
ord301
ord595
ord598
ord305
ord306
ord520
ord307
ord632
EVENT_SINK_AddRef
ord528
ord561
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord313
ord712
ord314
ord315
ord607
ord316
ord608
ord717
ProcCallEngine
ord645
ord681
ord685
ord101
ord102
ord103
ord104
ord105
ord617
ord619
ord581
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ