CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
04c9cc2ab535697b7a7f4c80530299ec.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
04c9cc2ab535697b7a7f4c80530299ec.dll
Resource
win10v2004-20231215-en
Target
04c9cc2ab535697b7a7f4c80530299ec
Size
76KB
MD5
04c9cc2ab535697b7a7f4c80530299ec
SHA1
effc1dd3510e419e1496615b18e2248822d91f28
SHA256
e7847df2a2a4f9afa5938c947b2bbfe9472f7f98c7b95d8070b0550b414e1382
SHA512
2baa8172648385037777ab285a617c6de3e1c6221cd08144e0f5f0bfc987b9528f534d6cb17986e7d5a43b4e6921dac5b047e7443d08db80b3cf083ed89dfddf
SSDEEP
1536:BfQAl+7ovOz9GI+/nzjVOdVQ/jwD1yvLI/WtJDns8wVgsEt9Bq2QII:dQAl+p8I+/zjVOdam0+QzwVSBqWI
Checks for missing Authenticode signature.
resource |
---|
04c9cc2ab535697b7a7f4c80530299ec |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE