DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
bb06e3ad826c8d8ed8656c1b5be14bb8.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb06e3ad826c8d8ed8656c1b5be14bb8.dll
Resource
win10v2004-20240226-en
Target
bb06e3ad826c8d8ed8656c1b5be14bb8
Size
30KB
MD5
bb06e3ad826c8d8ed8656c1b5be14bb8
SHA1
59624dc9ba2cb4408297fba768e23efa305b4e25
SHA256
a84b4d4659e1efdd6cf1ee9fbfbe57f937c2c450e7de1522b5adba07dbb4820d
SHA512
f949d7179b6eb84ac205e49731fc75b60381cbca27b2eab9dc2cb43a7283229d7ce9bc6d5b304d9aa99cb5cefe51e2666bc86ddc35094aa6f7d8e7a6230494b7
SSDEEP
192:J9h2P5BocyMlq3J4ZGs+D1FieZx08rQX2LzDAaecPd5wSIAGWk:J9YoJQq3yXC1lfTvDeclqSBk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bb06e3ad826c8d8ed8656c1b5be14bb8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DebugBreak
HeapFree
CloseHandle
lstrlenW
CreateFileA
GetSystemDirectoryA
MultiByteToWideChar
lstrlenA
HeapCreate
GetSystemInfo
HeapAlloc
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReadFile
DisableThreadLibraryCalls
wsprintfA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE