DisableHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EnableHook
SetupShellHook
Static task
static1
Behavioral task
behavioral1
Sample
0144c648c635d1056ff53686778923d6.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0144c648c635d1056ff53686778923d6.dll
Resource
win10v2004-20231215-en
Target
0144c648c635d1056ff53686778923d6
Size
144KB
MD5
0144c648c635d1056ff53686778923d6
SHA1
0104befe42ef9d14a6172a206efcdc44a5464965
SHA256
c2603901843b4cccde0c0cb0b830a7383b1ad10ef676042f284b762a5bad6c04
SHA512
80d3c84ae06875e3ab23148ad6977e2cc7ff113d106f6d6df733c74e664c1bd5f178ee18c8f6ca1e1810e7b05c862253bff2e6e3797990f7891fc6f9a95b150e
SSDEEP
1536:EEW1NLl7g7eyhLQk9jcnIMLTwp3sp40vcGLyyiIifXls2iymON:4Ll7g7exSjo/Y2vcrOifO7EN
Checks for missing Authenticode signature.
resource |
---|
0144c648c635d1056ff53686778923d6 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
MessageBoxA
DisableHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EnableHook
SetupShellHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ