Ajj80
DllRegisterServer
NIBPcz441G
Uqvhv87i
VByf1p
Static task
static1
Behavioral task
behavioral1
Sample
Ebirugpm.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Ebirugpm.dll
Resource
win10v2004-20231020-en
Target
Ebirugpm.dll.exe
Size
464KB
MD5
150adcff6076b0e8a5fffde4efa55f06
SHA1
c4e6d96f7725c236c9b85038f47d4df688c888b9
SHA256
74e4c41234d1c4c76416479bb5c8463b20c5dcce2bc4c1a78c649dd9a42d1e89
SHA512
5287b0e99ef8cb8575a38c39212b696a43e783a71d02bd1e70cd0288a61a1f343b8acfc4cfa41ce74f395d5640fe26cc000523a2e37b14532b3eb7be31a665a4
SSDEEP
6144:vrNd8Vz1C/aXRrp/sxKGr4ttKUGtjUDQyXQY3/9Cklpm3a7Y6n1ZLFFU8cUstJdo:sV5pp/K4tt+tjU7/flgK8SzLk++sGR0
Checks for missing Authenticode signature.
resource |
---|
Ebirugpm.dll.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetProcessHeap
CreateFileA
CloseHandle
GetLastError
ConvertThreadToFiber
SwitchToFiber
CreateThread
SuspendThread
OpenThread
FindFirstFileA
FindNextFileA
ReadFile
GetFileInformationByHandle
CreateFileMappingA
MapViewOfFile
CreateNamedPipeA
CallNamedPipeA
VirtualAlloc
GetNamedPipeHandleStateA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
WriteConsoleW
HeapFree
GetModuleHandleW
GetProcAddress
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
SetLastError
GetACP
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileW
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
FreeLibrary
LoadLibraryExW
LCMapStringW
IsValidCodePage
GetOEMCP
SetStdHandle
ExitProcess
GetModuleHandleExW
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
RaiseException
HeapSize
HeapReAlloc
CreateEventW
RtlUnwindEx
Ajj80
DllRegisterServer
NIBPcz441G
Uqvhv87i
VByf1p
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ