DllRegisterServer
DllUnregisterServer
ResumeServer
StartServer
StartW
StopServer
SuspendServer
Static task
static1
Behavioral task
behavioral1
Sample
80a5d7cf0563d404b31cbe9ce0acc928.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
80a5d7cf0563d404b31cbe9ce0acc928.dll
Resource
win10v2004-20231222-en
Target
80a5d7cf0563d404b31cbe9ce0acc928
Size
248KB
MD5
80a5d7cf0563d404b31cbe9ce0acc928
SHA1
58c3f8eef13ec9a783bed3173aa50eecf3cf6f86
SHA256
97b2ad04759e405abbde284e7b1e3d3169c013e54300af180a11bd5eb85170d7
SHA512
3ec6c8115c24b6be44e0488173ac6012db3feeba620444c2d7484ad8705f22aa0b0a9ba017643873830c31c64225a774cb3cbbb2990fbdd7ee914a167cb68a63
SSDEEP
3072:5VqfK66P8XNbzxYa0sJwoNp1e7Rdre5gTrnPlS6y1ZAn0Pe1k5c9azS+6IHEGABP:EVbzxYy7oDy5gQ6yMnKqJPoeGTq
Checks for missing Authenticode signature.
Processes:
resource |
---|
80a5d7cf0563d404b31cbe9ce0acc928 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DllRegisterServer
DllUnregisterServer
ResumeServer
StartServer
StartW
StopServer
SuspendServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ