DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
pesinislem.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
pesinislem.dll
Resource
win10v2004-20240508-en
Target
pesinislem.dll
Size
254KB
MD5
d61148e419e9c1cb764c46a866692bf1
SHA1
bed13774e74cbbdd7b9c3e9345b95aac25553bc0
SHA256
24ca9a6fec3b4aba670ab55fecaafc409ccb777e3c2d0788577872d59d11b93e
SHA512
1129231aa8b43460bf0fd267d5378e620dc96843f75a2376b55ce50bcf0289b9a5bec9ac75fece60ee62f059b4971c4565196351352516ace73d247cddb854a9
SSDEEP
3072:S7o9AJpoalhkvtJ2FWVoAbyhIHVO3naVTryylB9GEmq0Gk4Ie8LMVG007Oiwaq4:h9Yp7XkmpUOXmEEmq0GFx8LMVG00xJq4
Checks for missing Authenticode signature.
resource |
---|
pesinislem.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_onexit
__dllonexit
_except_handler3
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
free
_mbsrchr
_access
isspace
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
lstrcatA
GetCurrentDirectoryA
lstrcpyA
LeaveCriticalSection
FreeLibrary
EnterCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
LoadStringA
RegCloseKey
RegOpenKeyA
RegQueryValueA
CoFreeUnusedLibraries
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE