DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
fa03550cad680fe19b541586415f7045.dll
Resource
win7-20231215-en
Target
fa03550cad680fe19b541586415f7045
Size
155KB
MD5
fa03550cad680fe19b541586415f7045
SHA1
b5e5cb0375181a4ff24d4a29261deb8681d9cf39
SHA256
39bc640299e12eb7ea2401a98d7758aa16f0ba49e11c750c83d91c3e1f7012c5
SHA512
0e561af7f064a771986fee0e8bd02feb7529709e688873373f3cd8bb2314888c73b84c089e35d22e9d604e07d151f999357afc9fdaecd98eb81119542f5d90b5
SSDEEP
3072:vFx1Mh5OvD//eUMXdCkBkRqvLNRtb08vrmbUxvYy:9x1q5qr3UC78pDbGoz
Checks for missing Authenticode signature.
resource |
---|
fa03550cad680fe19b541586415f7045 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
CharNextA
CreateProcessAsUserW
SHGetFileInfoA
StringFromGUID2
SysFreeString
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE