DllMain
fhgbw
ivyqvi
jonndje
rmtjocg
Static task
static1
Behavioral task
behavioral1
Sample
6b0a7919390bc5f8efab48bc7f9d3925.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b0a7919390bc5f8efab48bc7f9d3925.dll
Resource
win10v2004-20231215-en
Target
6b0a7919390bc5f8efab48bc7f9d3925
Size
26KB
MD5
6b0a7919390bc5f8efab48bc7f9d3925
SHA1
8a2cec090471d62aa1a841cb8b56185306e3b59c
SHA256
8638c0f9ee8fdcf8b74819831d46f94d791098b6ecae299256cf70ae83aa7a69
SHA512
3582f289c6a381db1dfc99d268185b4c96b8b0aa166d06627f1c1a502dc313dc89dc874569566c334c1c2d497874a54d571bf678b7e87d28b85de9a09abeea4c
SSDEEP
384:FsJAyMOhBOVscHJexw0Nl9HlF1Pz2IP9Tyr5S9h/wiYfTkG0o:eAghOpn0Nn7Fz2STk5S92Fp0o
Checks for missing Authenticode signature.
resource |
---|
6b0a7919390bc5f8efab48bc7f9d3925 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcatA
lstrcpyA
lstrlenA
_strnicmp
__dllonexit
_errno
_itoa
atoi
fflush
free
malloc
memcpy
memset
strchr
strlen
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
SysAllocStringByteLen
VariantInit
wsprintfA
DllMain
fhgbw
ivyqvi
jonndje
rmtjocg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ