DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
Static task
static1
Behavioral task
behavioral1
Sample
0edffd2d6933146b600d1578f4654be6.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0edffd2d6933146b600d1578f4654be6.dll
Resource
win10v2004-20231215-en
Target
0edffd2d6933146b600d1578f4654be6.exe
Size
150KB
MD5
0edffd2d6933146b600d1578f4654be6
SHA1
ed3cc2c262d38c32bf6a789b5af0f5652497927b
SHA256
c0976a1fbc3dd938f1d2996a888d0b3a516b432a2c38d788831553d81e2f5858
SHA512
80fb4769cd7a86204ca1709c02c00e18c3f11777c1f0d7334cfd5c8daf75e6ce7a0d5a6bdb0fd0e645e0715545dd45a5f6fbc42c2eb6703c4e7b66167a5166b7
SSDEEP
3072:NFoNU2h8ujQnAdzzt2L1V4scSAA0Cx3b816DE:4U2hRoozzt2L1wSd003I0
Checks for missing Authenticode signature.
resource |
---|
0edffd2d6933146b600d1578f4654be6.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
ClearEventLogA
ImpersonateLoggedOnUser
ImpersonateNamedPipeClient
NotifyChangeEventLog
ReadEventLogA
RegCloseKey
RegFlushKey
RegNotifyChangeKeyValue
RegisterEventSourceA
CloseHandle
CreateFileA
CreatePipe
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
FindClose
FindNextStreamW
FlushConsoleInputBuffer
FlushFileBuffers
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileType
GetHandleInformation
GetLastError
GetProcAddress
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
OpenEventA
PurgeComm
QueryPerformanceCounter
ReadFile
ReplaceFileA
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEndOfFile
SetLastError
SetNamedPipeHandleState
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeA
lstrlenA
__iob_func
_amsg_exit
_initterm
_lock
_snprintf
_unlock
abort
calloc
free
fwrite
malloc
realloc
signal
strlen
strncmp
vfprintf
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
InitHelperDll
StartW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ