DllManagerReadProcess
LoadVantiDll
Static task
static1
Behavioral task
behavioral1
Sample
4f7bc1c80f7f4c939008ac3a9d728670.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4f7bc1c80f7f4c939008ac3a9d728670.dll
Resource
win10v2004-20231215-en
Target
4f7bc1c80f7f4c939008ac3a9d728670
Size
15KB
MD5
4f7bc1c80f7f4c939008ac3a9d728670
SHA1
2dc0103c27763c0deb22afcd4c08275a932cee6e
SHA256
d171201e8d0b4b9ce6bc59c848c96835e1ce91a85d4e250610402d334a6d23b8
SHA512
65a54b11b92cd776fd3e85c44139526096eeaee09528cf0e7d7d80920cd53a7ab0cff96612c2b0743cece36dead80eb40cfc50edcd33418cc7974389b54e1aaa
SSDEEP
192:K/tTAeCzwaiyNAQmxzusu+yHuIwyBAmCaPM1HeCy8P3Xs1spGlclCdQgurE5Tehm:OpAeCx74Q+yO7KAmCkq8C4bdQgHA
Checks for missing Authenticode signature.
resource |
---|
4f7bc1c80f7f4c939008ac3a9d728670 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllManagerReadProcess
LoadVantiDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE