CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
9a51f86ac5ff5ae8dae88b19414b37fa.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a51f86ac5ff5ae8dae88b19414b37fa.dll
Resource
win10v2004-20231215-en
Target
9a51f86ac5ff5ae8dae88b19414b37fa
Size
57KB
MD5
9a51f86ac5ff5ae8dae88b19414b37fa
SHA1
c9f25435722b45bae9532ee1fdd90de41bfe7faf
SHA256
33ca3eeb77e0aeee99441648a53efda51df23c4c304d715c6c31671f96514217
SHA512
c3240c230d0017188a134246100bf19027475d7b3226475e43732467fa1a677af13bb81fadb1f9185d06868486ef03b7606f2bbb4e99779f90510e94aa26a3a0
SSDEEP
1536:+fQAl+7ovOyMetkp9KAE68UvcwPmO07bPDG7:aQAl+pMtME6Bv5epy7
Checks for missing Authenticode signature.
resource |
---|
9a51f86ac5ff5ae8dae88b19414b37fa |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
time
UnhookWindowsHookEx
RegQueryValueExA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE