CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
00fc035807463d57b8bef5a2080a7d4b.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00fc035807463d57b8bef5a2080a7d4b.dll
Resource
win10v2004-20231215-en
Target
00fc035807463d57b8bef5a2080a7d4b
Size
58KB
MD5
00fc035807463d57b8bef5a2080a7d4b
SHA1
47a51969408564b3c69b284d49c8b01e93f30377
SHA256
dcf2a5899d8f1cdf831131da848a273e80a0004251ad3eb791c85521db4a1c00
SHA512
39f1f4b851be03aafbff0429cb122bf10901dd9153feff8799cada42a25319387c0afe72fd78b007a4d98005d1f3cc39a05a8f46a586e7b5fc87cf18923d6d7a
SSDEEP
1536:BfQAl+7ovOcRiigsTPl3eRDDfqMimjG582yz1+:dQAl+pmgszdgDDiMimyug
Checks for missing Authenticode signature.
resource |
---|
00fc035807463d57b8bef5a2080a7d4b |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE