DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
82d68c5390fdab5f12993504bf137a50b918488b735c7041783be5e2986c8ec0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
82d68c5390fdab5f12993504bf137a50b918488b735c7041783be5e2986c8ec0.dll
Resource
win10v2004-20240412-en
Target
82d68c5390fdab5f12993504bf137a50b918488b735c7041783be5e2986c8ec0
Size
32KB
MD5
25385a6a9fea2acb982f2d69b9d74d83
SHA1
4cd2033a87291fd7cf5f0f6b72ab77fbff9b0bec
SHA256
82d68c5390fdab5f12993504bf137a50b918488b735c7041783be5e2986c8ec0
SHA512
64709ccb3ff9c458d5210b077a46b1a99694c5e96eab22024d80923d18ef8b30ea52691240f7f8a82ad8ca114c7026c26b8168e1b2afeb0eb9d0548f6ab13199
SSDEEP
192:JnlX6cRWMxG4RMG180GoxMOSkt72MC7znkDAm:B3B5MczR2Mqgx
Checks for missing Authenticode signature.
resource |
---|
82d68c5390fdab5f12993504bf137a50b918488b735c7041783be5e2986c8ec0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
RtlUnwind
NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrProxyErrorHandler
NdrClearOutParameters
NdrProxyFreeBuffer
NdrPointerUnmarshall
NdrConvert
NdrProxySendReceive
NdrOleFree
NdrProxyGetBuffer
NdrSimpleStructBufferSize
RpcRaiseException
NdrProxyInitialize
NdrPointerFree
NdrPointerMarshall
NdrStubGetBuffer
NdrPointerBufferSize
NdrSimpleStructUnmarshall
NdrStubInitialize
NdrInterfacePointerMarshall
NdrInterfacePointerBufferSize
NdrInterfacePointerFree
NdrInterfacePointerUnmarshall
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrSimpleStructMarshall
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ