CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
032ec1bc090fe2c66c5789ba55fa38d1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
032ec1bc090fe2c66c5789ba55fa38d1.dll
Resource
win10v2004-20231222-en
Target
032ec1bc090fe2c66c5789ba55fa38d1
Size
55KB
MD5
032ec1bc090fe2c66c5789ba55fa38d1
SHA1
f4895a29e25c6317d91d63ff19e7f54aaa031876
SHA256
8e443e027b5c8f5719b4e5ab824e8e15f3d1815d0e7dada7739d8be778630542
SHA512
d29d04cf3ef22d2468b35ed65d74d8b304baa172ff031f52464c0a6d6bd736ea54996a25922365cf085f7c26a00759ccc23edde3035ff18d6db21b329e17a0a8
SSDEEP
1536:BfQAl+7ovOD003mq+HdJaBNQR0yBrq2ZuiDOeA7:dQAl+pD003NeHavaFBrbZwl
Checks for missing Authenticode signature.
resource |
---|
032ec1bc090fe2c66c5789ba55fa38d1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE