ConfigStartMenu
DllCanUnloadNow
DllGetClassObject
DllGetVersion
GetProgramsOnline
NewLinkHereW
RunOCMW
RunSPADW
Static task
static1
Behavioral task
behavioral1
Sample
c6254416374416c4b6dbcd1fa28e57cb.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6254416374416c4b6dbcd1fa28e57cb.dll
Resource
win10v2004-20231215-en
Target
c6254416374416c4b6dbcd1fa28e57cb
Size
468KB
MD5
c6254416374416c4b6dbcd1fa28e57cb
SHA1
2ff98aedf48184556e2bb48f7db706f706ecf6bd
SHA256
bf44c0e282d5465027ec92e7bf52ed430d40a3cbcab5fc9dcb36a82a88886a83
SHA512
3bc5882071fa4151d61f8d20c6fe3049eeae36c3486c378b9f76b4f5e915300fea02de988f6035c41a6b25c3ded29df8f234710193dbf595d07aeb69009f37e7
SSDEEP
12288:VnGAFj1BdXECCKzeYG0ZVyInvIsr2MIgCB0q+4F+B:ZVFVuMD3jHIf2
Checks for missing Authenticode signature.
resource |
---|
c6254416374416c4b6dbcd1fa28e57cb |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CryptEncrypt
ExitProcess
GetModuleHandleW
GetModuleFileNameA
GetBinaryTypeA
GetCurrentThreadId
SetEnvironmentVariableW
WriteConsoleOutputA
GetCommandLineA
SetWaitableTimer
VarI4FromR8
VariantCopyInd
LZOpenFileW
IsCharAlphaW
GetMenuDefaultItem
TranslateAcceleratorW
GetFocus
GetThreadDesktop
GetCapture
SetUserObjectSecurity
MprAdminInterfaceDelete
MprAdminPortEnum
IIDFromString
StgCreateDocfileOnILockBytes
CertGetIssuerCertificateFromStore
SetupOpenMasterInf
SetupGetFieldCount
PdhParseCounterPathW
RpcStringBindingComposeW
GdiFlush
FlattenPath
RevokeBindStatusCallback
ConfigStartMenu
DllCanUnloadNow
DllGetClassObject
DllGetVersion
GetProgramsOnline
NewLinkHereW
RunOCMW
RunSPADW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ