DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6bb2d88a69af028f9aba80c897b9cf6c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6bb2d88a69af028f9aba80c897b9cf6c.dll
Resource
win10v2004-20231215-en
Target
6bb2d88a69af028f9aba80c897b9cf6c
Size
368KB
MD5
6bb2d88a69af028f9aba80c897b9cf6c
SHA1
5472f1cdb228602951553f7d36cfb535e743c915
SHA256
e737c2180807ae910e9d228b5ded5106fac25d1c02e09ad3f67f913db21ce59a
SHA512
55c6e69b02a4cc16538dd5e83d65b833d51bbbf5221d1dc13ee0d7d01b8f4b5005ea0361037c88df15b2071fe8a277f23d879dc27924cd225cf44b48cba1d3fb
SSDEEP
6144:c2lkEurS0HhRvIR40PtPps+JPZQzhEsFFehrKDXSooK6rb4sh7xQCCwp6:xl0hhO4WtPNQNEsDXDXHQkqCc6
Checks for missing Authenticode signature.
resource |
---|
6bb2d88a69af028f9aba80c897b9cf6c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
VerQueryValueA
UnrealizeObject
IsEqualGUID
ImageList_SetIconSize
SHGetSpecialFolderLocation
SHGetFolderPathA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE