CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
8dbfd1f6707291b0f0b74a62dbb6772c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8dbfd1f6707291b0f0b74a62dbb6772c.dll
Resource
win10v2004-20231222-en
Target
8dbfd1f6707291b0f0b74a62dbb6772c
Size
61KB
MD5
8dbfd1f6707291b0f0b74a62dbb6772c
SHA1
1d8fa8b785a1d60a642ecc72cffe3769c5448778
SHA256
39b7f391f65ee6dba715427f7f2542fa3965a1af60a48bb7364de25ae5f3ab99
SHA512
fce817ce4196f3c3f8ee2d21eebaf7421d145e4d2a2014056030de80456aeb2dab1dbba93994928679b7091ef63d1b846038e6c271f9b4836a1d56f56197a063
SSDEEP
1536:+fQAl+7ovOfs5kp7zHaEGARlEGw5Z1tEE:aQAl+pfsup7zHQGuZ1H
Checks for missing Authenticode signature.
resource |
---|
8dbfd1f6707291b0f0b74a62dbb6772c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE