DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClassInfoForCurrentUser
GetDefaultPartitionForCurrentUser
Behavioral task
behavioral1
Sample
7dc54ee9e052c0ac079d37d3dff6a965.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7dc54ee9e052c0ac079d37d3dff6a965.dll
Resource
win10v2004-20231215-en
Target
7dc54ee9e052c0ac079d37d3dff6a965
Size
752KB
MD5
7dc54ee9e052c0ac079d37d3dff6a965
SHA1
61d862a072a5c70f27fc67296aedc4f5a8643538
SHA256
c2528d4e751a5a015396c1e6394455309b413e2896700c7a7083c85f9a271237
SHA512
6dc3f871d28d77159e27028f917797f9b1590fb94e24d4293f9db23c89db8b85e3814934ec69f0323f1447bbd5a87b8ccfda7c53578021c92036097dc9a678bb
SSDEEP
6144:/Y6b2HWCv2SynVXETBl7n298Y4/BA38llkS:/Jb2Hh+SGXET3A8Y4s8B
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
7dc54ee9e052c0ac079d37d3dff6a965 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetClassInfoForCurrentUser
GetDefaultPartitionForCurrentUser
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ