DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetMSNChat
Static task
static1
Behavioral task
behavioral1
Sample
4446c2b2896e71919c66e14f2735e3d9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4446c2b2896e71919c66e14f2735e3d9.dll
Resource
win10v2004-20231215-en
Target
4446c2b2896e71919c66e14f2735e3d9
Size
45KB
MD5
4446c2b2896e71919c66e14f2735e3d9
SHA1
9c6fa3ab14d6f28736d9c7f84f7e534c70ec321d
SHA256
e277d35ac6b7c7a64fd604fd2e05c47cbfa16e80127171240cab21c79b712f78
SHA512
39c055b6448fb4f4d51002553f11f4878e50c7ac9fd780d9b9e8924cd6610d152d7da584f87695cf0b6856c8034b1d5581db66094c3e37e83289f1ba392a92b3
SSDEEP
768:Msvaboy4kZn4OrKzTy22g/+RWiQOvq8ya2nFjOSnRiE7HbLWQxmXCc7:MMaT4kZ5KHH/+IDOS8tSFCgPWEc7
Checks for missing Authenticode signature.
resource |
---|
4446c2b2896e71919c66e14f2735e3d9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
CoRegisterClassObject
AccessibleObjectFromWindow
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetMSNChat
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE