DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
02f3b0138b25c2685ee51eeca3368969d0936aba5a22982fc6c7e7ed54a82399.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
02f3b0138b25c2685ee51eeca3368969d0936aba5a22982fc6c7e7ed54a82399.dll
Resource
win10v2004-20240508-en
Target
02f3b0138b25c2685ee51eeca3368969d0936aba5a22982fc6c7e7ed54a82399
Size
92KB
MD5
fe53e804f0b0648b4b6e699eb480800a
SHA1
e3ccccb61c821b396adbb931d2b19397fd96c01a
SHA256
02f3b0138b25c2685ee51eeca3368969d0936aba5a22982fc6c7e7ed54a82399
SHA512
e88865081fcdb25a28f605f8caab8a9fb5daae70d0666b9a17318fdc61caa5a45bd3e88f21e0e456b38a357ac2696708bf8532ced73842524d396bca22163db3
SSDEEP
1536:TI3IODS4TUdnug8xlY3aS1cYMl7gZC7gGIikj2BlN:UFDS45TsaqcYLC01ikj2Bl
Checks for missing Authenticode signature.
resource |
---|
02f3b0138b25c2685ee51eeca3368969d0936aba5a22982fc6c7e7ed54a82399 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateStreamOnHGlobal
RtlMoveMemory
MethCallEngine
ord518
ord660
ord553
ord557
ord591
ord592
ord593
ord594
ord595
ord598
ord520
ord631
ord632
EVENT_SINK_AddRef
ord528
ord529
ord561
DllFunctionCall
EVENT_SINK_Release
ord600
ord601
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord607
ord608
ord531
ProcCallEngine
ord644
ord645
ord573
ord681
ord576
ord578
ord685
ord101
ord102
ord103
ord104
ord105
ord617
ord619
ord542
ord543
ord544
ord545
ord546
ord547
ord581
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ