DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5a1f218d50a772088e4e5dc42c04ff8a.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5a1f218d50a772088e4e5dc42c04ff8a.dll
Resource
win10v2004-20231222-en
Target
5a1f218d50a772088e4e5dc42c04ff8a
Size
42KB
MD5
5a1f218d50a772088e4e5dc42c04ff8a
SHA1
d775e4ebf775d1b0c4aa63c40854cbcc28857617
SHA256
c1ba63714bc30e998e02e2522981ad9e194ce100032f19f17191e8e02af137cd
SHA512
07aa22e326c4bb2de78aaae019fe2ad00d0948454050ecb631c382221d6f908b00d711b35a6d5b9af5b8740a2b99b5caaee76c3c159d0d4814e285bab9e3b4d6
SSDEEP
384:xdvxzDWH1qWv2dj4rSdsSub0UsnuD2NYwrBrW2:EHSsrb7opuPw
Checks for missing Authenticode signature.
resource |
---|
5a1f218d50a772088e4e5dc42c04ff8a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
GetSystemInfo
HeapCreate
lstrlenW
InitializeCriticalSection
HeapFree
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
HeapAlloc
DebugBreak
GetModuleHandleW
LoadLibraryW
DeleteCriticalSection
OutputDebugStringA
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
LoadRegTypeLi
SysFreeString
SysStringLen
ord23
ord58
ord30
ord21
ord16
ord15
ord32
ord57
ord18
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ