?CommonWell@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
?QuantumPointer@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
?SilentDispatch@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
6db3f1ab81af74f74b5a38de74e4f145.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6db3f1ab81af74f74b5a38de74e4f145.dll
Resource
win10v2004-20231222-en
Target
6db3f1ab81af74f74b5a38de74e4f145
Size
160KB
MD5
6db3f1ab81af74f74b5a38de74e4f145
SHA1
e212792fb57755aac4faeb0ef13bb356b79ddf5e
SHA256
6dffcba9831cbc3922ed5b1e7814b61f6e35f5152de7f89097b134bd7f9b7848
SHA512
75c0eb0b8606f9086cd6dbb5596e849971fc4708740e1226f306c52670e568a1007fc4ac1dbb67b5c6581c5501cd16bb079c4839a31cd1c10ab1b16b43aadb6b
SSDEEP
3072:88jTHTCe5Bhxlv3jr1/UXerl566efRaQ6VyynHlTaJIgypaCKtLLV6:xHuGBhxlvv1CMboP6VLTaadpet1
Checks for missing Authenticode signature.
resource |
---|
6db3f1ab81af74f74b5a38de74e4f145 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathStripPathW
StrStrW
StrCpyW
memset
LoadLibraryA
?CommonWell@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
?QuantumPointer@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
?SilentDispatch@@YG_KPAUHINSTANCE__@@U_COMMPROP@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ