DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
16b04db867901fd8d6440c8399e941387bedcec89708cb931aa4a91603068c30.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
16b04db867901fd8d6440c8399e941387bedcec89708cb931aa4a91603068c30.dll
Resource
win10v2004-20240508-en
Target
16b04db867901fd8d6440c8399e941387bedcec89708cb931aa4a91603068c30
Size
80KB
MD5
354e6ac333b68cd1901eaddef842473b
SHA1
07b08cf41e3457326de248b31cf9968a473790f6
SHA256
16b04db867901fd8d6440c8399e941387bedcec89708cb931aa4a91603068c30
SHA512
dbded67d0add8720b2b8c65511c0b9bca96579b3b7efa976ca0756f4e551e4b691cda094e8fc37d2ee05b9a786e04267fa297a9ad9ae92d02256616cea87441b
SSDEEP
768:6VZqct507gf0ysgcuz5/M8TtNTtGUTtkdTt5sN81KletKnP/:aZwgf0ysg/ZG2cEeM3
Checks for missing Authenticode signature.
resource |
---|
16b04db867901fd8d6440c8399e941387bedcec89708cb931aa4a91603068c30 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MethCallEngine
ord518
ord660
ord591
ord300
ord303
ord598
ord305
ord306
ord520
ord309
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord313
ord712
ord714
ord608
ord681
ord101
ord102
ord103
ord104
ord105
ord617
ord650
ord546
ord581
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ