?gkerty@@YAHXZ
?ropqf@@YAHXZ
?sorte@@YAHXZ
DllRegisterServer
PluginInit
Static task
static1
Behavioral task
behavioral1
Sample
528d2815e758ed2f1a5519b5944644c1.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
528d2815e758ed2f1a5519b5944644c1.dll
Resource
win10v2004-20231215-en
Target
528d2815e758ed2f1a5519b5944644c1
Size
41KB
MD5
528d2815e758ed2f1a5519b5944644c1
SHA1
7aa316041b433e44db14b42865904f973a6a6c56
SHA256
67515f2a51c3ce416e999039e453f35407f1d7dfafb4a427969d97a1bf92afd9
SHA512
502d07e4cc812e3a528c101626abf6a788f5908c1918e6044f861bc2e55446a65a0890c97577b715d142c96394271984b5396ed3502d28c67f7e9960934b21d2
SSDEEP
768:pGUmGKOVR1krI2qwQgl5IMzo+TB6Y/okIMcGzjAORTB2HOouLDsD:kuwvDzlBzokt7zjlTxRve
Checks for missing Authenticode signature.
resource |
---|
528d2815e758ed2f1a5519b5944644c1 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ord15
StrStrA
wnsprintfA
ChrCmpIA
DeleteFileA
GetModuleFileNameW
Sleep
GetProcAddress
LoadLibraryA
GetCurrentThreadId
GetCurrentProcessId
CreateFileW
SetTimer
GetClientRect
MessageBoxA
GetWindowDC
GetClassNameW
GetMessageW
DispatchMessageW
GetForegroundWindow
SystemParametersInfoW
GetSysColor
SendMessageW
GetWindowTextW
KillTimer
SendMessageA
GetBkColor
CoInitializeEx
CoTaskMemFree
?gkerty@@YAHXZ
?ropqf@@YAHXZ
?sorte@@YAHXZ
DllRegisterServer
PluginInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE