CancelDll
LoadDll
Static task
static1
Behavioral task
behavioral1
Sample
ace8b949e5899eeff1d85d637f1cca45.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ace8b949e5899eeff1d85d637f1cca45.dll
Resource
win10v2004-20240226-en
Target
ace8b949e5899eeff1d85d637f1cca45
Size
81KB
MD5
ace8b949e5899eeff1d85d637f1cca45
SHA1
55a1358a58355ba0998a64546ef47d95ef210c2e
SHA256
e52c8d958e244d2630922ef8cfbedd73915741931db20a422a72990de50b9953
SHA512
2bacebc8475655771b8481ec3bba2e06e3141ca4af69be1bce708a8c8bde2e1f541038805e2093c829e4a3f15f08435cebdfc28caaa9d121ec1fcf4f9b89c99c
SSDEEP
1536:meGhUZSS6puhuE6D0b+PL0pmFKkHeTYwNJ9WXMbM2TLY80tCk4Jhxw:/YUd6ohn+0byLJ1H3WOXMg2TUBCbw
Checks for missing Authenticode signature.
resource |
---|
ace8b949e5899eeff1d85d637f1cca45 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
memset
CreateDCA
wsprintfA
CancelDll
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE