DllCanUnloadNow
DllGetClassObject
Fkodomo
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
9b8969294f21091b52a9a9d143e9615d.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9b8969294f21091b52a9a9d143e9615d.dll
Resource
win10v2004-20231222-en
Target
9b8969294f21091b52a9a9d143e9615d
Size
789KB
MD5
9b8969294f21091b52a9a9d143e9615d
SHA1
c0ddbc6df59eac0eb34572ae36888ab3b3a39ce0
SHA256
3f37f849dcf86ebfa12b5a17da813b517bd5e729e68a00960512124b36940e34
SHA512
616e41ab47766bbaf6f5f3c7d68b55a9bcc4d9bdabbc516043420e5da1cf8570950652944dd21962371c1bbb3b8c7f29f3a3c4688b532561084748ff40dc7821
SSDEEP
24576:FWhRf/NpnY4d2Q5FFqKSJICMAzxr4ROS4EDvjos:orHnLd5FsE4
Checks for missing Authenticode signature.
resource |
---|
9b8969294f21091b52a9a9d143e9615d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Fkodomo
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE