WSPStartup
installProtocol
removeProtocol
Static task
static1
Behavioral task
behavioral1
Sample
cd4f79c8c24d03e0808112be24756f1c.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cd4f79c8c24d03e0808112be24756f1c.dll
Resource
win10v2004-20240226-en
Target
cd4f79c8c24d03e0808112be24756f1c
Size
124KB
MD5
cd4f79c8c24d03e0808112be24756f1c
SHA1
119683f925ad1a283e26818e8a30ec1dc37775eb
SHA256
58f6e0afecbe143120cbdd5d67acdfe11a50b45291b5a298fd8c938a19f6e155
SHA512
357723d6004bec2cd6d2946998ae07f97763c1b2a211fb83b66369ff000e9b8962726d5b2adae95b5b3524d202e1aa65d0a75498a3ae7cb4319028cbbdfc622f
SSDEEP
3072:tGdjdAj/1LMf15Nh2PvP2SMlLkufXjrS6l44vxDqfjHlUT:8VCitzh2PHwJ3Sm44BqfjHl4
Checks for missing Authenticode signature.
resource |
---|
cd4f79c8c24d03e0808112be24756f1c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
LoadLibraryA
GetModuleHandleA
WSPStartup
installProtocol
removeProtocol
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE