DllRegisterServer
DllUnregisterServer
StartW
StopW
Static task
static1
Behavioral task
behavioral1
Sample
d6b185aec50c5eb71d3fd44c3cfe404f.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
d6b185aec50c5eb71d3fd44c3cfe404f.dll
Resource
win10v2004-20240226-en
Target
d6b185aec50c5eb71d3fd44c3cfe404f
Size
264KB
MD5
d6b185aec50c5eb71d3fd44c3cfe404f
SHA1
458b64b277479f93e26d1fb010856510af98d3c0
SHA256
0554a979641f72a031a7047549ab1809df0c1f6f54bf305a460b0ce85cad3782
SHA512
9154ad1a889c0d33bca564536b2ddded779843f9090c8cfd3f7d00585730fdcaa31a2825a7650a96173498b5f68c503bd66edbff787b01ec6574ae8dae86e8e3
SSDEEP
6144:R0ZWJC63nWjgsV/Uqgl6S8Gypw7xUNjPpYmQyIOhYlMC:R0oJXWfMWZfY41hq
Checks for missing Authenticode signature.
resource |
---|
d6b185aec50c5eb71d3fd44c3cfe404f |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetThreadPriority
TlsGetValue
WaitForSingleObject
GetCurrentThread
VirtualAlloc
VirtualFree
GetSystemTime
LoadLibraryA
GetProcAddress
DllRegisterServer
DllUnregisterServer
StartW
StopW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ