CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
04d67f08c52c386391f77bc1b4d02d1e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04d67f08c52c386391f77bc1b4d02d1e.dll
Resource
win10v2004-20231215-en
Target
04d67f08c52c386391f77bc1b4d02d1e
Size
51KB
MD5
04d67f08c52c386391f77bc1b4d02d1e
SHA1
3364096d19cfd97c431abe811c7a2e084fbdf711
SHA256
e130147f54d3cad9372fe33d2d4a7d436bc185e3b4b71df0f69a07a8f876f16b
SHA512
9e4cfa1a9c19abd59c44a977fb9955709856b77ba6f04d829e0d826af9566d76ed7829e5d3f5595ae7588c65786458c10749474458765afcfea87800dc23ca2b
SSDEEP
1536:BfQAl+7ovOJ3bdbx8LY9Uuk6ujD0V73/pO0zj:dQAl+pfKYLk6Ox0/
Checks for missing Authenticode signature.
resource |
---|
04d67f08c52c386391f77bc1b4d02d1e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE