DllCanUnloadNow
DllGetClassObject
Kmkonga
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
adffbd4d165c5657ff81e70461b05f30.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
adffbd4d165c5657ff81e70461b05f30.dll
Resource
win10v2004-20240226-en
Target
adffbd4d165c5657ff81e70461b05f30
Size
718KB
MD5
adffbd4d165c5657ff81e70461b05f30
SHA1
ce64ce2d0254872e41f20ccd589ec05316db63bf
SHA256
832fad9faf4f87cde01b9d5d57178378adedafb3ed2ad69d505b3b4b85bf08bc
SHA512
54a7385e7bb9e3c5faca779f14e13f0aa61c712460c1233ff034bd0d350a21d1242b755304cee445f13861d6e33b191435c136f1421568f0a8ebc694dce5cb10
SSDEEP
12288:99eEDZf/7xgrTnhO7VS31BejOkFf2S6tP6ON6bV1jzwCdGhqJWRICXu/jVUhnUtD:SGZXGrTnUo31BWf22rLEQoRICXu/+63S
Checks for missing Authenticode signature.
resource |
---|
adffbd4d165c5657ff81e70461b05f30 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpy
InitCommonControls
DllCanUnloadNow
DllGetClassObject
Kmkonga
DllMain
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE