DllRegisterServer
DllUnregisterServer
NevtAmdfxsoZubqmdnz
QotlcerqxcgFjxvwybou
ResumeServer
StartServer
StartW
StopServer
SuspendServer
Static task
static1
Behavioral task
behavioral1
Sample
2c55e4a21797f201d9af90fb0e116d3d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2c55e4a21797f201d9af90fb0e116d3d.dll
Resource
win10v2004-20231215-en
Target
2c55e4a21797f201d9af90fb0e116d3d
Size
288KB
MD5
2c55e4a21797f201d9af90fb0e116d3d
SHA1
6342ee315e548955d5d29e60a37525d9b2339ae7
SHA256
431f43dfd6254fb710e3bf37b506b2e81313ba4cefdde251777ca5a04f54d269
SHA512
57dc739726ed2760e21c16d0f22923aa90c24c5f9979f4a2a1fc0f3d5324e9937f037589c16138ca30ec7525d90f458f871e79468382937f8897dd3065170755
SSDEEP
3072:p6QlU5T0+vk+wYDgN3XwmbvV4Ynnbe9rhNifQMpnIjZ9jAPUn4CbwKL0Fo3dgqTj:pXEwZSZeKZVA6BNL0F1h31eMgIfq
Checks for missing Authenticode signature.
Processes:
resource |
---|
2c55e4a21797f201d9af90fb0e116d3d |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DllRegisterServer
DllUnregisterServer
NevtAmdfxsoZubqmdnz
QotlcerqxcgFjxvwybou
ResumeServer
StartServer
StartW
StopServer
SuspendServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ