DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Static task
static1
Behavioral task
behavioral1
Sample
a2aa152ffec7994c3985ab8a803e3bda.dll
Resource
win7-20240221-en
Target
a2aa152ffec7994c3985ab8a803e3bda
Size
70KB
MD5
a2aa152ffec7994c3985ab8a803e3bda
SHA1
2f0e0ce101093813dac816feb207948537076ab0
SHA256
c4871599f9c20705737121d63a705864cdeefd6162b9722c014b1b15ab68a172
SHA512
b06a273bfcffd110e7d0cb47121daa85f627708b1e4aa0bc9193bfa038abda6cd05b4680ce1148c1541ab700278e7718e65c938c67210465112e3fff721f344b
SSDEEP
1536:6xzIAMz0c0fRXHNDtl6A9OYg6zaHJIVguuBpXgckma:UIDQ/fHDtRsjHiV+woa
Checks for missing Authenticode signature.
resource |
---|
a2aa152ffec7994c3985ab8a803e3bda |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
SHDeleteValueA
WSAStartup
FtpOpenFileA
IsCharAlphaNumericA
CreateSolidBrush
RegCreateKeyExA
ShellExecuteA
OleInitialize
SysStringByteLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE