DllRegisterServer
Rundll32
Static task
static1
Behavioral task
behavioral1
Sample
CnsM.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
CnsM.dll
Resource
win10v2004-20231222-en
Target
522cd5240e1862d80ca0d4fe430ab77c
Size
8KB
MD5
522cd5240e1862d80ca0d4fe430ab77c
SHA1
91619c9902f921029e34f0ea82bf57d41e94ba90
SHA256
a8d46434b905da9c3d5c7881603c1c3e998d4ee46929cafa3edf7f4d9d75857c
SHA512
5902b8dc61c9db08415cf1e4d3d678e2fd08eeedbab4a96c80ab3bc8537a78cab8954d1e3ca1226d66a8dd44a3f041f3a86111cffb77955facf9d5ec16f946db
SSDEEP
192:oYhGpoLlQ4n9OXVYQMclRGoVqdMUFMqAZ90x2WeM:o6GKLmJXVYQLTGQARk90Ai
Checks for missing Authenticode signature.
resource |
---|
unpack001/CnsM.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
LoadLibraryA
GetModuleHandleA
MoveFileA
DeleteFileA
VirtualQuery
SetLastError
VirtualProtect
GetProcAddress
ExitProcess
SetUnhandledExceptionFilter
WriteProcessMemory
GetCurrentProcess
GetVersion
SetWindowsHookExA
CallNextHookEx
FindWindowA
SendMessageTimeoutA
MessageBoxA
_strupr
_adjust_fdiv
_initterm
free
malloc
memmove
_vsnprintf
fopen
fseek
fprintf
ftell
strstr
strncpy
strrchr
fclose
DllRegisterServer
Rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ