DllInstall
DllRegisterServer
newdsesd
sdahkejsje
Static task
static1
Behavioral task
behavioral1
Sample
cbdcf6224aa15c70a22346594d1956c0589a9411beb75a003eaccb15db4370a5.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cbdcf6224aa15c70a22346594d1956c0589a9411beb75a003eaccb15db4370a5.dll
Resource
win10v2004-20240226-en
Target
cbdcf6224aa15c70a22346594d1956c0589a9411beb75a003eaccb15db4370a5
Size
6.1MB
MD5
1f7d2cbfc75d6eb2c4f2b8b7a3eec1bf
SHA1
5d41e15aba6d89fe99b96e53a3c9d18da7e019a6
SHA256
cbdcf6224aa15c70a22346594d1956c0589a9411beb75a003eaccb15db4370a5
SHA512
3a162c95d24fce06dacfd990a7d1bd56b639255b07659c77e898d3e2ffe1e4c7eb8c767b54c7c5d7fbf17611d61d09c21cbb219eee2261ba990c592a0d5bdbff
SSDEEP
196608:NR52zB++G017hOsyQ3B2eV3u7wBN4l4H:NR5SVvvOsyO2SAwqM
Checks for missing Authenticode signature.
resource |
---|
cbdcf6224aa15c70a22346594d1956c0589a9411beb75a003eaccb15db4370a5 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CloseHandle
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetProcessWindowStation
GetUserObjectInformationW
DllInstall
DllRegisterServer
newdsesd
sdahkejsje
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ