?Dllmain@@YAXPEAUHWND__@@PEAUHINSTANCE__@@PEADH@Z
DllRegisterServer
DllUnregisterServer
EntryFunct
Static task
static1
Behavioral task
behavioral1
Sample
ffabdf1333fa7b54338615e209d24fb42c4331d936f72f55240f40ddf64321a7.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ffabdf1333fa7b54338615e209d24fb42c4331d936f72f55240f40ddf64321a7.dll
Resource
win10v2004-20230915-en
Target
ffabdf1333fa7b54338615e209d24fb42c4331d936f72f55240f40ddf64321a7
Size
292KB
MD5
fc9a6cf51ec8773256fd503967ea52b3
SHA1
850ccb226affbac57d5aaa08c5f786c7569d65d4
SHA256
ffabdf1333fa7b54338615e209d24fb42c4331d936f72f55240f40ddf64321a7
SHA512
4ba26121ac453e53fd0fc8e5b27f7a9d5acd166c66a841b3bc92ec91e0dc67b29fd46644bde47807a3c017a478648eb0c686f3fee308ab6f62c238595642776c
SSDEEP
6144:PjkM3lrGGJTbkP85tWWWWHTYjjSmAbrqEd5TO/r7N:PdZGGt/OWWw8j4/G7
Checks for missing Authenticode signature.
resource |
---|
ffabdf1333fa7b54338615e209d24fb42c4331d936f72f55240f40ddf64321a7 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
HeapAlloc
Sleep
CreateThread
ExitProcess
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
wsprintfA
?Dllmain@@YAXPEAUHWND__@@PEAUHINSTANCE__@@PEADH@Z
DllRegisterServer
DllUnregisterServer
EntryFunct
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ