DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
890577288dd481e2372430c67b1df25fa2db5074a5ebed0845a255ae5ea6a4da.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
890577288dd481e2372430c67b1df25fa2db5074a5ebed0845a255ae5ea6a4da.dll
Resource
win10v2004-20240226-en
Target
890577288dd481e2372430c67b1df25fa2db5074a5ebed0845a255ae5ea6a4da
Size
60KB
MD5
6e721dbc1f859c80bba031375e4d7980
SHA1
2f377f1d46ea7f47076df3ca64c01e888c0aa960
SHA256
890577288dd481e2372430c67b1df25fa2db5074a5ebed0845a255ae5ea6a4da
SHA512
9874c1a9b284d312d41d3b6e40eda293102b0c33b076fe4688e54508b918e8094b1ce9c7de820bf1f42d6a7ec2fc39edc33278112bf52e552ddd760ccd44d428
SSDEEP
768:oXJZW17so9vKMgFXkhS10MUZQ8WbQ3WQ2vuRmm4rdo0B4q/zD+NmfhPeXLz9n966:oZZAsoevmMldjB4R0Pe6kk
Checks for missing Authenticode signature.
resource |
---|
890577288dd481e2372430c67b1df25fa2db5074a5ebed0845a255ae5ea6a4da |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord690
MethCallEngine
ord518
ord552
ord660
ord557
ord300
ord303
ord598
ord306
ord520
ord309
ord632
EVENT_SINK_AddRef
ord528
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord714
ord607
ord608
ProcCallEngine
ord685
ord101
ord102
ord103
ord689
ord104
ord105
ord617
ord619
ord650
ord581
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ