?gkerty@@YAHXZ
?ropqf@@YAHXZ
?sorte@@YAHXZ
DllRegisterServer
PluginInit
Static task
static1
Behavioral task
behavioral1
Sample
0191d804a9f8002705af77451f26ace7.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0191d804a9f8002705af77451f26ace7.dll
Resource
win10v2004-20231215-en
Target
0191d804a9f8002705af77451f26ace7
Size
41KB
MD5
0191d804a9f8002705af77451f26ace7
SHA1
788c22f75cf4eb53d49d047709428eb8fb9828e5
SHA256
0096bedd441d95a48494a2023442721c7b5dac2ff1251356e0a7b478a16caba7
SHA512
ad012a7ee5e1f39ea057152e0602f7f626401350ff05dc869baf0df95969bd916480bc800f2071ae32b68a8e76c499b4cfa341613792a0682ad88257d238b050
SSDEEP
768:pGUmGKOVR1krI2qwQgl5IMzo+TB6Y/okIMcGzjAORTB2HOouLDsX:kuwvDzlBzokt7zjlTxRvC
Checks for missing Authenticode signature.
resource |
---|
0191d804a9f8002705af77451f26ace7 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ord15
StrStrA
wnsprintfA
ChrCmpIA
DeleteFileA
GetModuleFileNameW
Sleep
GetProcAddress
LoadLibraryA
GetCurrentThreadId
GetCurrentProcessId
CreateFileW
SetTimer
GetClientRect
MessageBoxA
GetWindowDC
GetClassNameW
GetMessageW
DispatchMessageW
GetForegroundWindow
SystemParametersInfoW
GetSysColor
SendMessageW
GetWindowTextW
KillTimer
SendMessageA
GetBkColor
CoInitializeEx
CoTaskMemFree
?gkerty@@YAHXZ
?ropqf@@YAHXZ
?sorte@@YAHXZ
DllRegisterServer
PluginInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE