DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
564d4798f16a35a6cea3fcd3e2976f4c.dll
Resource
win7-20231215-en
Target
564d4798f16a35a6cea3fcd3e2976f4c
Size
48KB
MD5
564d4798f16a35a6cea3fcd3e2976f4c
SHA1
6eb7fd9d9414b977e120809b30d14db9f3b0b387
SHA256
adda7294878490a0439bc41ccffbbdab0fdffc6dcef9820a5c3f63a706b5ad21
SHA512
148781dc3738067dca1ff0f512ecf1531a81a687b60fce411f3db2e959d035812b9f089181af19204eda70520805cf1aa123cd153b5d94dc36d9547478d1ca47
SSDEEP
768:+Nj5GIjHRw4pfKa+KQ1w5OGNMLlttVXg9REYm8AO3JS3ksP/qpSfddAMeqVQI:+XGQSGfXF2GNMLBmLtUOw3XiZgn
Checks for missing Authenticode signature.
resource |
---|
564d4798f16a35a6cea3fcd3e2976f4c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE