DllCanUnloadNow
DllGetClassObject
Iknnkge
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
7bf54e75a00f83329501d8e9aada64af.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7bf54e75a00f83329501d8e9aada64af.dll
Resource
win10v2004-20231222-en
Target
7bf54e75a00f83329501d8e9aada64af
Size
809KB
MD5
7bf54e75a00f83329501d8e9aada64af
SHA1
9d42e602cf2f323ab38cb2f3e852b8e4e86b7433
SHA256
e2d0ea91e572b438a2c65282f084d0b6298b3fa2947c144ffc6d313ca399c9e9
SHA512
4af40f0eb4fb74dbc1a31bd002e97e201fc61b8343be7459749630d9ee9426377d5b8a991f3345de151883abd309656de50fb258cb2fc2d685f7af281a504d2f
SSDEEP
24576:WxZUhNkMPWBIOuqD40HqJLkfxWkEjan6i486x:WDUhNkMP0gX0mLkfxW5j668m
Checks for missing Authenticode signature.
resource |
---|
7bf54e75a00f83329501d8e9aada64af |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Iknnkge
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE