DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Static task
static1
Behavioral task
behavioral1
Sample
ba8c379be718c618c8088d40f00ca567.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ba8c379be718c618c8088d40f00ca567.dll
Resource
win10v2004-20240226-en
Target
ba8c379be718c618c8088d40f00ca567
Size
35KB
MD5
ba8c379be718c618c8088d40f00ca567
SHA1
5e674664030d2612b854a674786ed4d02451810d
SHA256
e71e1a701653b9f2a9b34cab6a9560ae9b7efd85a19e4e6ca907dff0fb2c7af3
SHA512
903c20aac233b2ae3d03c92c7ef064d64637765fbbca8bc8323b46969cc94f56da91ca3b130c5c9f1ea7619345d6735573cdcd04551cab1fb6062e4cbd592f26
SSDEEP
384:a3Ubt67T9TGZk1DgZSo+zWso2g0WetWbxLzIJI3RYIHlU0x5D6A5tfsPmQ:abZfRg8WZ2gw8zIqRYIHhXGw0Pj
Checks for missing Authenticode signature.
resource |
---|
ba8c379be718c618c8088d40f00ca567 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
NdrOleAllocate
IUnknown_AddRef_Proxy
NdrOleFree
IUnknown_QueryInterface_Proxy
CStdStubBuffer_AddRef
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_Invoke
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
NdrDllRegisterProxy
CStdStubBuffer_DebugServerRelease
NdrDllUnregisterProxy
NdrDllGetClassObject
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
GetStdHandle
GetFileType
LoadLibraryA
GetProcAddress
GetStringTypeA
LCMapStringW
GetStringTypeW
VirtualAlloc
HeapFree
LCMapStringA
WriteFile
WideCharToMultiByte
HeapAlloc
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
MultiByteToWideChar
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
HeapCreate
GetStartupInfoA
HeapDestroy
GetCPInfo
VirtualFree
GetModuleFileNameA
GetACP
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE