DllInstall
DllRegisterServer
DllUnregisterServer
NXManager
NimMain
Static task
static1
Behavioral task
behavioral1
Sample
ffff.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ffff.dll
Resource
win10v2004-20231215-en
Target
ffff.dll
Size
621KB
MD5
9f4d915ad71535090325b6f67c29b6d6
SHA1
e3ad2d010cb289af5f0cd584c93c75edded79af3
SHA256
9271663a54098b6b917e53034192ea3ba262cd46ea699c50d2c213c975a32b35
SHA512
27c50064fd5b95d4456ea18fefea1b551ebf63cb7421d22a2627fad5eb496d1c788987b2ed00d563a5c3651dba8fc219adcba944df3265b1f525b710965eb61f
SSDEEP
12288:wA/vkok31sQE7fbNiPgGtX38rsgKKSWWWWWWwyvfxXj+pjSUtKaGJi:wcO1sQE7fe38r8WWWWWWwyBT2zUaGJi
Checks for missing Authenticode signature.
resource |
---|
ffff.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DeleteCriticalSection
EnterCriticalSection
GetLastError
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_fileno
_get_osfhandle
_initterm
_lock
_setjmp
_setmode
_unlock
_wfopen
abort
calloc
exit
fflush
fputc
free
fwrite
localeconv
malloc
memchr
memcpy
memset
realloc
setvbuf
signal
strcmp
strerror
strlen
strncmp
strstr
vfprintf
wcslen
longjmp
DllInstall
DllRegisterServer
DllUnregisterServer
NXManager
NimMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ