DllRegisterServer
DllUnregisterServer
PauseW
ResumeW
RkaxjzggxDpjuloukzqy
StartW
Static task
static1
Behavioral task
behavioral1
Sample
1c097300ebae6be95db4f2b516e991b5.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c097300ebae6be95db4f2b516e991b5.dll
Resource
win10v2004-20231215-en
Target
1c097300ebae6be95db4f2b516e991b5
Size
193KB
MD5
1c097300ebae6be95db4f2b516e991b5
SHA1
ab8f8f6c0f8baa19c523d36ab94d43216c7c2ac4
SHA256
1ad6cce5373c9ac35ec561a3ed04780c587beed6d519ab63277d9dbab6d24aae
SHA512
7139808963cf6c8ba0302605ea0215f2ef54025800390f7ba1dd8a09cc1f42c382d9ebb399a0a64be526d9cd8e3c67f8d4df07e1b5a23cb1d9fa9cd0addc76a5
SSDEEP
3072:nxmvSD5I/Tzfb7AThVXxc4iUgaGEaCPWXBlkaBCTLh1XOTF0Ksx3K26zR0EtULfr:nxGvfv8XiTaiLBC/hp+WEefI2INqT
Checks for missing Authenticode signature.
resource |
---|
1c097300ebae6be95db4f2b516e991b5 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetThreadPriority
TlsGetValue
WaitForSingleObject
WaitForMultipleObjects
CreateThread
CreateFileA
DeleteCriticalSection
EnterCriticalSection
GetCommandLineW
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
GetSystemTime
DllRegisterServer
DllUnregisterServer
PauseW
ResumeW
RkaxjzggxDpjuloukzqy
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE