DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
43351d1c614c1372daa807778b923408c3583499fdb9ee313656c906bca5862e.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
43351d1c614c1372daa807778b923408c3583499fdb9ee313656c906bca5862e.dll
Resource
win10v2004-20231020-en
Target
43351d1c614c1372daa807778b923408c3583499fdb9ee313656c906bca5862e
Size
1.4MB
MD5
7d59914ae8983e86b991864da1ea8777
SHA1
f776d96b2d0ce63f211c2765abb938700c03a26c
SHA256
43351d1c614c1372daa807778b923408c3583499fdb9ee313656c906bca5862e
SHA512
e15779d9fa4d61ba1c761dd4ef6c6532b1aeca6a00b20ed34629750e004b88057bde0fcc2fc77aae3ecc586479d6992f3d30bf9b4bf80339041d9c26a294156a
SSDEEP
24576:es1Xcd8zItQ8yf2LU/HObsWfeTOeqe3fo7AXFOng6uMQPaQNxC/YgnJgb:eWXtzI8uexTaEQ3gpfC/YgnJg
Checks for missing Authenticode signature.
resource |
---|
43351d1c614c1372daa807778b923408c3583499fdb9ee313656c906bca5862e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
__vbaVarTstGt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE