DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
bac99f7a488ac0499ea1636f4d16dd3dfca2c1c4ebff06c3374d194ce16b8233.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bac99f7a488ac0499ea1636f4d16dd3dfca2c1c4ebff06c3374d194ce16b8233.dll
Resource
win10v2004-20240226-en
Target
bac99f7a488ac0499ea1636f4d16dd3dfca2c1c4ebff06c3374d194ce16b8233
Size
4KB
MD5
0c6b41d25214f04abf9770a7bdfcee5d
SHA1
805ab904bfd0a55413b10105ff9d97acf54653f5
SHA256
bac99f7a488ac0499ea1636f4d16dd3dfca2c1c4ebff06c3374d194ce16b8233
SHA512
e220440c80460d02e793fd5e16905d95d48325df3aeba2555ca8e80e35878c85f62ead170fa089a5a7d6f63770c4296897bbe94a81ca57eb86b531cbd95c8eae
SSDEEP
48:6sSV5IWmvE1etG7Ehgz1NBIPNawqtAaAHY2PqhtPr8Ma35MiF8ZZ0J7O:m5IWm6vz1NyartAaAyEz8Zi8
Checks for missing Authenticode signature.
resource |
---|
bac99f7a488ac0499ea1636f4d16dd3dfca2c1c4ebff06c3374d194ce16b8233 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapAlloc
HeapFree
HeapReAlloc
IsWow64Process
ReadProcessMemory
Sleep
WaitForSingleObject
WriteProcessMemory
RtlComputeCrc32
RtlImageNtHeader
strlen
wcslen
_wcslwr
NtClose
NtQuerySystemInformation
NtOpenProcess
EnumProcessModules
GetModuleBaseNameW
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ