DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Start
Static task
static1
Behavioral task
behavioral1
Sample
bbe9f9d2b04d6cfd3155117fc7cf2d3e12413e1604391660d2121afd1977c210.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
bbe9f9d2b04d6cfd3155117fc7cf2d3e12413e1604391660d2121afd1977c210.dll
Resource
win10v2004-20231222-en
Target
bbe9f9d2b04d6cfd3155117fc7cf2d3e12413e1604391660d2121afd1977c210.dll
Size
288KB
MD5
864774eec8d69d0838ba09e68020062a
SHA1
ed4df39462f32321dfff803cc65c2c1424ce1328
SHA256
6da36eccec2af420eb02853f24c0e0364c62a164a310b4168f4cb281eb1de4fa
SHA512
077517b9eee043bfbdd378a3085f0e793a05c4866258da8376f7bb06436463063484db1fd92f0b20eee597e06a2e50037c83210701193b0a0bd713f78a3446d4
SSDEEP
6144:3A6hXP57t+m8zGW1f0diJXyz20e5uiOP1uHfCcK:3A6P/+mEGW1MdXPIqJ
Checks for missing Authenticode signature.
resource |
---|
bbe9f9d2b04d6cfd3155117fc7cf2d3e12413e1604391660d2121afd1977c210.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ