DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
11604a9b702d94d0c257953b9ff46514ce9b50edf16bc105c9b4bcc5ab0e06b5.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
11604a9b702d94d0c257953b9ff46514ce9b50edf16bc105c9b4bcc5ab0e06b5.dll
Resource
win10v2004-20231020-en
Target
11604a9b702d94d0c257953b9ff46514ce9b50edf16bc105c9b4bcc5ab0e06b5
Size
90KB
MD5
f0ea65787483462f320dc1676fb43ae6
SHA1
79a32d99ac96b002eaa70bd8e5853c2e48fe1242
SHA256
11604a9b702d94d0c257953b9ff46514ce9b50edf16bc105c9b4bcc5ab0e06b5
SHA512
d750d32435278fe06efb3015cff31c50294bf3851ab79f12b24b6d00491d25319f7099c9d486e2fd2f5d63aeb50e3976f854f007f0b466c38c883a383a75b753
SSDEEP
1536:DwyaUlKj8dDifu+GAOPI3m7aSw0bBamUPpnw46cz5UJ3e7RuYt4Q8YQDkf9cut:Hpl88duoAOPI3cal0bBamwpwFc8O7RHh
Checks for missing Authenticode signature.
resource |
---|
11604a9b702d94d0c257953b9ff46514ce9b50edf16bc105c9b4bcc5ab0e06b5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
__vbaVarTstGt
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE