DllCanUnloadNow
DllGetClassObject
Jocgdgc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1aaddc809a49b5ac86082fa16e230567.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1aaddc809a49b5ac86082fa16e230567.dll
Resource
win10v2004-20231215-en
Target
1aaddc809a49b5ac86082fa16e230567
Size
790KB
MD5
1aaddc809a49b5ac86082fa16e230567
SHA1
11e7466643dc20dbc57d69c59f704f580985f408
SHA256
e76eeb7f4ace1c712685e0f3f7e8d0651c11173b21aaa096c7830adb2ebd6142
SHA512
73e14c09bc61811351950968dbf033bc4728cb3919da2852a87cb195d0b760fd02da2e308d4f1608d9172342849d76dc410eda9a1e0f1d688aeb493a89375788
SSDEEP
24576:FbFR8FTfNkKSvJf1wkGM0Y8USoP8dAj5FAG:NFR85WKSVkM58e8aj5+
Checks for missing Authenticode signature.
resource |
---|
1aaddc809a49b5ac86082fa16e230567 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Jocgdgc
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE