DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
fb69a027a13f37590b6049c51b9b304e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fb69a027a13f37590b6049c51b9b304e.dll
Resource
win10v2004-20231215-en
Target
fb69a027a13f37590b6049c51b9b304e
Size
75KB
MD5
fb69a027a13f37590b6049c51b9b304e
SHA1
e3dc9f682848f85ccb37c3d45496737c56e53065
SHA256
c1b94a7d8c4cc2de8f5dbda999565726c9cfa238c7c721a8d11ae24be01d8989
SHA512
038d2210a959d633b372995db1551f632b36440374112729b28af9c0a41a4d123a061aec179967685068ebb4d4ca6eab6d415003fd1999bd5cb5b9f1e1d6acd5
SSDEEP
1536:4VJLF0ZiMRdo9vlJGjCEmApk9fvQzApc5LR/enyIHcvIdd0s:qL03o9GjhEfA9WyqcvIdis
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fb69a027a13f37590b6049c51b9b304e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
SetHandleCount
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE